Ben Boeckel wrote:
> On Mon, Jan 12, 2015 at 15:44:54 -0800, Brendan Cully wrote:
> > Although not necessary, this patch turns off signing during encryption
> > of the postponed message (and turns it back on before saving), since
> > there is no need to sign the message yet.
> 
> I'd say not signing is the only option. Otherwise, if the hard drive
> contents were somehow compromised, the message could be sent as-is with
> my "blessing" (this is similar to the signed-push feature git now
> has[1]).

Just to make sure the feature is clear, this patch only encrypts the
postponed message to $postpone_encrypt_as.  Even if the message were
somehow obtained, signed or unsigned, it would still only be readable by
you.

-Kevin

Attachment: signature.asc
Description: PGP signature

Reply via email to