Re: GnuPG usage for automatic remote decryption

2018-04-06 Thread Mike Inman
Hi Dirk & Ken, I'm working on a similar problem... automated decryption "in the field" and what I have come to is this: Encrypt the message with a symmetric algorithm, adding salt and a hash/checksum to ensure validity. Then, taking that result and signing with a private key. In the field -

Re: GnuPG usage for automatic remote decryption

2018-04-06 Thread Peter Lebbing
On 05/04/18 10:50, 周詮儒 wrote: > Since a secret key needs a passphrase to > use. Let me clarify because it is not obvious: this is not the case. It is perfectly valid to have a secret key without a passphrase. The drawback is anyone with file access to the on-disk copy of the secret key has full

Re: GnuPG usage for automatic remote decryption

2018-04-06 Thread Andre Heinecke
Hi, On Thursday, April 5, 2018 9:46:25 PM CEST gnupg-users.d...@o.banes.ch wrote: > Two points: > A) You could try to automatically ssh into the remote machine to > trigger decryption and passphrase entry. For this usecase I'm using AgentForwarding ( https://wiki.gnupg.org/ AgentForwarding