Re: Web-based pinentry

2012-08-31 Thread Werner Koch
On Thu, 30 Aug 2012 16:28, m...@silverorange.com said: > Where can I find documentation that recommends not using a passphrase? > My understanding is a passphrase is important to protect private keys > in the event they are acquired: Right. However, most people asking for an easy way to convey t

Re: Web-based pinentry

2012-08-30 Thread Michael Gauthier
> yyy yyy at yyy.id.lv > Thu Aug 30 12:48:45 CEST 2012 > >> As of GnuPGv2, the --command-fd method of passing passphrases no longer >> seems to work. Is there an alternative I can use so that the pin entry >> interface is still a webpage? >> >> Please let me know what I can use to handle pin-entry

Re: Web-based pinentry

2012-08-30 Thread Werner Koch
On Wed, 29 Aug 2012 18:32, m...@silverorange.com said: > Please let me know what I can use to handle pin-entry in a web-based system. For exact that reasons (the original requester was building a student webmail system), GnuPG has a feature to make this easy. What you need to do is to provide a

Re: Web-based pinentry

2012-08-30 Thread yyy
- Original Message - From: "Michael Gauthier" To: Cc: "Michael Gauthier" Sent: Wednesday, August 29, 2012 7:32 PM Subject: Web-based pinentry As of GnuPGv2, the --command-fd method of passing passphrases no longer seems to work. Is there an alternative I can

Web-based pinentry

2012-08-29 Thread Michael Gauthier
Hello, I'm the maintainer of a PHP package that integrates with GnuPG (https://github.com/gauthierm/Crypt_GPG) The package is used on a website to allow decrypting stored messages. This is accomplished using the --status-fd and --command-fd options of GnuPG, allowing the passing of passphras