On 14.06.18 09:50, Werner Koch wrote: [...] >> I therefore recommend you change --log-file XXX to --log-file /dev/null. >> This should be OK for Enigmail and equally prevent from such attacks. > > Another option for non-fixed gpg versions is to use --no-verbose.
That's implemented in Enigmail 2.0.7 - all calls to gpg contain now --no-verbose. -Patrick
signature.asc
Description: OpenPGP digital signature
_______________________________________________ enigmail-users mailing list enigmail-users@enigmail.net To unsubscribe or make changes to your subscription click here: https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net