-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am revisiting the idea of signing my ML/NG posts by default.  A
couple of issues came up in a dry run of the process, though.  These
all pertain to my trying to use GPG through TB!

1.  A dialog box comes up, which has a checkmark option to use the
Password Database.  How is this constructed?  In particular, how
secure is it?  It seems to me like a very bad idea to put one's
passphrase into a hard drive database.

2. How is the passphrase cached when it is entered into the dialog
box?

3. Only one key came up in the dialog box, without a drop-down menu.
It was the key currently set as default in GPG.  Is there any way to
either specify a particular key for TB! or to see a menu of choices?
The concern is that I might change my option set to another key, which
would then set up the wrong key for TB!; yes, I know that I would be
alerted to that, but then I'd have to load GPGshell, etc. etc.

4.  Hmmm....  of even more concern, now that I tried to send the
preceding message, is that when the signing dialog box came up and I
entered my passphrase on the lower line for the key which was shown on
the upper line, I received the following:

          gpg: no default secret key: bad passphrase
          gpg: [stdin]: clearsign failed: bad passphrase

Why did that occur?  My passphrase was not incorrect.  (This message
was signed with the same passphrase and the same key, but with
GPGshell in the systray.)

Thanks.

- -- 
JN

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0-nr2 (Windows 98) - GPGshell v2.60

iD8DBQE9sCqasVVIqpflTDsRAg2FAJ4iP7BisEAXYVU1qq/91PRG8998iACfRCkf
d9BxDHX2jrDI35NIeCkPrLg=
=0wxX
-----END PGP SIGNATURE-----


________________________________________________
Current version is 1.61 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Reply via email to