On Thu, May 30, 2013 at 06:41:28PM -0400, Eric Dorland wrote:
> * Josh Triplett (j...@joshtriplett.org) wrote:
> > Package: gnupg2
> > Severity: normal
> > 
> > Many packages depend on libgpgme11, which depends on gnupg2, which
> > currently depends on gnupg-agent.  gnupg-agent attempts to become the
> > default agent for X11 sessions (potentially interfering with the user's
> > existing agent such as gnome-keyring), and additionally pulls in a giant
> > pile of GUI dependencies via its dependency on pinentry-gtk2.  gnupg2
> > does not require gnupg-agent, nor is it even particularly unusual to
> > have gnupg2 installed without gnupg-agent on many systems.  Thus, I'd
> > suggest that gnupg2 should only Suggests gnupg-agent.
> 
> In what way does gnupg2 not depend on gnupg? If you want to enter a
> password into gnupg2 gpg-agent is a requirement.

First, because there exist many uses for gpg2 that do not involve
entering a passphrase, such as verification of existing signatures,
working with passphraseless keys, or using options like --passphrase-fd.
I'd argue that's actually the common case for most people with gnupg or
gnupg2 installed.

Second, because several other agents exist, such as gnome-keyring, which
get pulled in as part of a default desktop install.

And third, because libgpgme11 depends on gnupg2, but programs depending
on libgpgme11 should not necessarily pull in gnupg-agent, given the
above.

- Josh Triplett


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to