[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: NaCl support for Emacs

From: Ted Zlatanov
Subject: Re: NaCl support for Emacs
Date: Tue, 10 Jan 2012 06:45:49 -0500
User-agent: Gnus/5.110018 (No Gnus v0.18) Emacs/24.0.90 (gnu/linux)

On Mon, 09 Jan 2012 19:01:48 -0800 Daniel Colascione <address@hidden> wrote: 

DC> On 1/9/12 5:43 PM, Ted Zlatanov wrote:
SM> I don't think Emacs should reinvent every wheel.  GPG does this job well
SM> and using it means that those files can be decrypted without Emacs.
>> Calling out to an external process is less secure than using built-in
>> encryption primitives.  So while in general you're right, in this case
>> I'll respectfully disagree.  It may be convenient but it's not secure.

DC> If an attacker can read the bytes sent over a pipe between your Emacs
DC> and its GPG subprocess, you've already lost. I'm not sure what
DC> reasonable definition of "secure" you meant to use here.

I'm being polite.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]