Re: pgp support?
- From: Carlos Morgado <chbm chbm nu>
- To: balsa-list gnome org
- Subject: Re: pgp support?
- Date: Wed, 16 Aug 2000 23:45:12 +0100
On Wed, Aug 16, 2000 at 06:13:54PM -0400, Peter A. Kimball wrote:
> Ian Campbell wrote:
> > I have heard rumours (on Evolution list I think) that the gnupg people are
> > working on making the backend of gpg into a library.
> > If this is true, I would think waiting untill this becomes available might be
> > advisable, it will certainly make life easier...
> It certainly would have for me: There was, for a while, a library made by one of
> the GPG developers which was supposed to do all of the hard work, Privacy Guard
> Glue (PGG), and I did look into using it, but development seems to have stopped
> on it, and I was unable to get it to work. I tried contacting the developer, but
> got no response.
hum. gpg glue is not the same has libgpg. gpg glue forks gpg and talks to it
via stdin pipes. yucky
or is it even other gpg glue lib ?
> I will say that the way I had to do the GPG interactions is highly insecure.
> Because I had to use pipes to get data to and from GPG, there are security issues
> which would be resolved by using a library. Now, should this level of security
> be an issue for the general user: probably not. But, for the really paranoid,
It's Wrong. it's broken, ugly and disgusting :)
> I don't know if anyone has looked at what I've written, I hope I didn't make it
> sound too poor. It does work, but I'm sure if you're willing to wait, using the
> library is a better deal.
Someone (you ? i forget :\) proposed using this method while we wait for gpg
people and i agreed. it sucks but it's better than nothing :\
meanwhile i'm trying to get zurich underway so that we all have a corba
interface to crypto.
Carlos Morgado - chbm(at)chbm(dot)nu - http://chbm.nu/ -- gpgkey: 0x1FC57F0A
http://wwwkeys.pgp.net/ FP:0A27 35D3 C448 3641 0573 6876 2A37 4BB2 1FC5 7F0A
[.sig not available - hiding behynd lost inode]
] [Thread Prev