Package: gajim
Version: 0.11.4-2
Severity: wishlist

Hi,

I'm using the gpg encryption capabilities of gajim with some contacts. But I
dont use it often. Currently, there's two way of using it:

- standalone: gajim asks for the passphrase at startup, then caches it in
  memory. Not really usefull to ask for the passphrase at startup, I guess.
  And then it's not really secure to keep the passphrase cached.
- using gpg-agent: gajim asks for the passphrase at startup, then again and
  again and again, because gpg-agent “forgets” the passphrase regularly, for
  security reason.

There's no reason (I guess) to keep the passphrase constantly available for
gajim, if it doesn't use it. If there's no conversation with a gpg-enabled
contact, no need to cache it. When a message gpg-encrypted comes, ask for the
passphrase, then cache it in memory during the conversation time, then forget
it.

I'm not sure, but I don't think gajim use gpg to sign every outgoing messages,
especially for not gpg-enabled contact.

Thanks for maintaining gajim anyway!

Cheers,
--
Yves-Alexis Perez

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.25 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages gajim depends on:
ii  dnsutils                      1:9.4.2-10 Clients provided with BIND
ii  python                        2.5.2-0.1  An interactive high-level object-o
ii  python-glade2                 2.12.1-1   GTK+ bindings: Glade support
ii  python-gtk2                   2.12.1-1   Python bindings for the GTK+ widge
ii  python-pysqlite2              2.4.1-1    Python interface to SQLite 3
ii  python-support                0.7.7      automated rebuilding support for P

Versions of packages gajim recommends:
ii  dbus                          1.2.1-1    simple interprocess messaging syst
ii  notification-daemon-xfce [not 0.3.7-1    a daemon that displays passive pop
ii  python-dbus                   0.82.4-2   simple interprocess messaging syst
ii  python-gnupginterface         0.3.2-9    Python interface to GnuPG (GPG)

-- no debconf information


Reply via email to