Re: Suggestion for epa-mail-mode

[Leo]

On 2010-12-20 22:52 +0000, ken manheimer wrote:
> thanks, leo. i'm genuinely sorry it took so long.

Is it? The key is it is done ;)

> in fact, there were some substantial features i had to trade-off in
> the transition. allout is more cumbersome and error-prone for dealing
> with symmetric encodings for numerous encrypted entries in a file,
> because i had to let go of encryption passphrase validation and
> hinting. that comes in exchange for significantly less insecurity due
> to no handling of passphrases in emacs code. instead, as always when
> using epg with GnuPG version 2, all passphrase handling is outside of
> emacs, in gnupg's gpg, gpg-agent, and pinentry, which i expect are
> drastically less vulnerable.
>
> it is for that reason that i was ultimately willing to forego those
> features, though i wish i could have more control without greater
> vulnerability...

Many thanks for the hard work. That looks like good compromise.

> ken

Best,
Leo