[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: About the removal of pinentry.el

From: Nicolas Petton
Subject: Re: About the removal of pinentry.el
Date: Tue, 16 Jan 2018 14:19:05 +0100

John Wiegley <address@hidden> writes:

> Sounds like it.

I updated the package on ELPA with the changes from the Emacs

What about the following NEWS entry?

  ** The pinentry.el library has been removed.
  The package is still available through ELPA.  With 'epa-pinentry-mode'
  set to the symbol 'loopback', epa can now redirect Pinentry queries to
  Emacs instead of an external Pinentry program.
  pinentry.el is still useful together with the 'pinentry-emacs' program
  to always use Emacs minibuffer to prompt for passphrases, even when
  using GnuPG outside of Emacs.
  Note that previously, it was said that passphrase input through
  minibuffer would be much less secure than other graphical pinentry
  programs.  However, these days the difference is insignificant: the
  'read-password' function sufficiently protects input from leakage to
  message logs.  Emacs still doesn't use secure memory to protect
  passphrases, but it was also removed from other pinentry programs as
  the attack is unrealistic on modern computer systems which don't
  utilize swap memory usually.


Attachment: signature.asc
Description: PGP signature

reply via email to

[Prev in Thread] Current Thread [Next in Thread]