Richard Levitte - VMS Whacker <[EMAIL PROTECTED]>:

[...]
> I would trust passwords passed over stdin before anything passed in
> the command line or environment, any time.  Not that stdin is perfect
> either, mind you, but still...

Environment variables must usually be considered public.  PGP
evaluates a PGPPASSFD environment variable and reads from the named
file descriptor; with this approach, you don't have to send passwords
and actual data through the same pipe.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to