Subject: Re: PGP: Passphrase requirements
To: Berndt Josef Wulf <wulf@dingo.ping.net.au>
From: Paul Dokas <dokas@cs.umn.edu>
List: netbsd-help
Date: 03/14/2001 11:28:21
--dc+cDN39EJAMEtIO
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Mar 14, 2001 at 02:54:21PM +1030, Berndt Josef Wulf wrote:
>=20
> Is there a way of decrypting a message
> without having to enter the passphrass?
>=20
> I like to automate the decryption of incoming
> messages that were encrypted with the public key
> of the receiver. Can this be done?

Probably, but that would most likely involve having the passphrase for
the secret key laying around in plain text.  And that is something that
I would *highly* discourage since it is a huge security hole.

Perhaps a better solution is to use mutt to read your email.  You can
configure it to remember your passphrase.  Then you only need to enter
the passphrase for the first encrypted email.  All other encrypted emails
will then be decrypted with the passphrase that you've given mutt.

It's not a perfect solution and it still has security problems, especially
for the terminally paranoid.  But it might work for you.

Paul
--=20
Paul Dokas                                            dokas@cs.umn.edu
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Don Juan Matus:  "an enigma wrapped in mystery wrapped in a tortilla."

--dc+cDN39EJAMEtIO
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (NetBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE6r6ozLG2yfOyrTCARAnUCAJ4saAHyST7lCB+lnMTGce4VTOEHgQCfVFud
8Xs2XU1n1nGqf4BfYGUpwfE=
=YuKp
-----END PGP SIGNATURE-----

--dc+cDN39EJAMEtIO--