-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Fri, Nov 18, 2016 at 02:49:00PM +0000, Michael Carbone wrote:
> Is there an easy way to disable split-gpg notifications? They are just
> screen noise, and in XFCE cover the time and systray by default.

The easy (hacky) way is to comment out notify-send in
/etc/qubes-rpc/qubes.Gpg.

> From a security perspective without timestamps in the access logs
> (https://github.com/QubesOS/qubes-issues/issues/1835) a malicious
> pre-approved email client could just decrypt emails in mass when the
> user is AFK to avoid notifying the user, so I see little security benefit.

That's true indeed. I wonder if blocking split-gpg while screenlocker is
engaged would make sense? Currently similar purpose have confirmation
with a 5min timeout.

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJYLzuoAAoJENuP0xzK19csxtEH/2/tojTCpyLpLtukFvBmYIJb
zuKxQcKIXU7Iy7EHYR/VlvBApUT3IXhm5zIJw1pNBGOhCoLR2PNuX1B3Gpf3kV6U
grXzgWx84YI/FzOnAHEWoSly5393z3nh9zzygsRBjBEJCvBNU4WnIACyf+pA+j9D
QONA2655qhcoTveii2oAyQAsgARg080tcz1W5XG9ziBpOLGghfRkFkaTc7UW3WP/
Fhk0nK6+IsmvHRFSukilKcDhfI+7DZWTrUb6ZKsSogOka3ZqhWgjFXuxkLyosBMi
k3BZhZs+xDb6ApY40w/mBdNt+Iu9pjt/EugWh7CInmTPTvI1srBA/B72v2AG6+Q=
=sV3q
-----END PGP SIGNATURE-----

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20161118173432.GS1145%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Reply via email to