David Shaw wrote:
> Again, though, if you're going to actually code the passphrase into
> the script itself, why have a passphrase at all?

On this subject, you should also know that, if you can enter your
passphrase on the system once each time the system starts up, you may
find a combination of gpg-agent (from gnupg-2) and keychain (a
Gentoo-originated script, http://www.gentoo.org/proj/en/keychain/ , that
auto-instantiates and auto-reuses ssh-agent and/or gpg-agent) to be
useful.  It's slightly more secure than writing your passphrase to your
hard drive, and the measures required to get at your key are slightly
more drastic.

(Incidentally, this is probably not the forum to ask for help about
keychain. :-)

Good fortune
PSM

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to