On 23/05/13 20:25, NdK wrote:
> Really useful, IMVHO. Unless you have to sign *a lot* of things...

Werner Koch does not agree it's a security feature (and I suppose that's why you
think it's useful), as he said in this[1] thread:

> In any case it is not a security measure because the host may simply
> cache the PIN and and silently do a verify command before each sign
> operation.  To avoid that simple workaround, a pinpad reader which
> filters the VERIFY command would be needed.

Peter.

[1] http://lists.gnupg.org/pipermail/gnupg-users/2013-February/046051.html

-- 
I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
You can send me encrypted mail if you want some privacy.
My key is available at <http://digitalbrains.com/2012/openpgp-key-peter>

_______________________________________________
Gnupg-users mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to