Re: Web-based pinentry

2012-08-31 Thread Werner Koch
On Thu, 30 Aug 2012 16:28, m...@silverorange.com said: Where can I find documentation that recommends not using a passphrase? My understanding is a passphrase is important to protect private keys in the event they are acquired: Right. However, most people asking for an easy way to convey the

Re: Web-based pinentry

2012-08-30 Thread yyy
- Original Message - From: Michael Gauthier m...@silverorange.com To: gnupg-users@gnupg.org Cc: Michael Gauthier m...@silverorange.com Sent: Wednesday, August 29, 2012 7:32 PM Subject: Web-based pinentry As of GnuPGv2, the --command-fd method of passing passphrases no longer seems

Re: Web-based pinentry

2012-08-30 Thread Werner Koch
On Wed, 29 Aug 2012 18:32, m...@silverorange.com said: Please let me know what I can use to handle pin-entry in a web-based system. For exact that reasons (the original requester was building a student webmail system), GnuPG has a feature to make this easy. What you need to do is to provide a

Re: Web-based pinentry

2012-08-30 Thread Michael Gauthier
yyy yyy at yyy.id.lv Thu Aug 30 12:48:45 CEST 2012 As of GnuPGv2, the --command-fd method of passing passphrases no longer seems to work. Is there an alternative I can use so that the pin entry interface is still a webpage? Please let me know what I can use to handle pin-entry in a

Web-based pinentry

2012-08-29 Thread Michael Gauthier
Hello, I'm the maintainer of a PHP package that integrates with GnuPG (https://github.com/gauthierm/Crypt_GPG) The package is used on a website to allow decrypting stored messages. This is accomplished using the --status-fd and --command-fd options of GnuPG, allowing the passing of