Subject: bug#15553: closed (Re: bug#15553: 24.3.50; epg.el and GnuPG 2.x cause unavoidable pinentry prompts for symmetrically encrypted files)

From: [email-masked] (GNU bug Tracking System)
Date: Mon, 07 Oct 2013 23:55:04 +0000

Your bug report

#15553: 24.3.50; epg.el and GnuPG 2.x cause unavoidable pinentry prompts for symmetrically encrypted files

which was filed against the emacs package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to [email-masked].

-- 
15553: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=15553
GNU Bug Tracking System
Contact [email-masked] with problems

Subject: Re: bug#15553: 24.3.50; epg.el and GnuPG 2.x cause unavoidable pinentry prompts for symmetrically encrypted files
From: Daiki Ueno <[email-masked]>
To: Teodor Zlatanov <[email-masked]>
Cc: [email-masked]
Date: Tue, 08 Oct 2013 08:54:17 +0900
List-Id: <debbugs-submit.debbugs.gnu.org>

tags 15553 notabug
thanks

Teodor Zlatanov <[email-masked]> writes:

> 1. Install GnuPG 2.x, don't run gpg-agent
> 2. Open file.gpg, X or curses pinentry dialog pops up
>
> The suggested workaround is to run gpg-agent.

So you can workaround, what's your problem?

> Problems:
>
> - on a headless server this can lock up Emacs

Not a problem if you use the workaround.

> - if the GPG agent is dead, locked up, or not running, there's no remedy

Ditto.

> - the X pinentry dialog is very non-specific ("Enter passphrase") so
>   there's no way to know what passphrase is being requested and why if
>   you don't have the specific instance in focus.

Unreleated to this bug, please open a new one.

> - there's no way to avoid the prompt in favor of an Emacs minibuffer query

As I said a number of times, that degrades security.  If the insecurity
is okay for you, what's the reason you want to use GnuPG 2.x rather than
GnuPG 1.x?

Subject: 24.3.50; epg.el and GnuPG 2.x cause unavoidable pinentry prompts for symmetrically encrypted files
From: Teodor Zlatanov <[email-masked]>
To: [email-masked]
Date: Mon, 07 Oct 2013 14:03:08 -0400
List-Id: <debbugs-submit.debbugs.gnu.org>

1. Install GnuPG 2.x, don't run gpg-agent
2. Open file.gpg, X or curses pinentry dialog pops up

The suggested workaround is to run gpg-agent.

Problems:

- on a headless server this can lock up Emacs

- if the GPG agent is dead, locked up, or not running, there's no remedy

- the X pinentry dialog is very non-specific ("Enter passphrase") so
  there's no way to know what passphrase is being requested and why if
  you don't have the specific instance in focus.

- there's no way to avoid the prompt in favor of an Emacs minibuffer query

In GNU Emacs 24.3.50.2 (x86_64-unknown-linux-gnu, GTK+ Version 3.4.4)
 of 2013-09-20 on flea.lifelogs.com
Bzr revision: 114415 [email-masked]
Windowing system distributor `The X.Org Foundation', version 11.0.11304000
System Description:	Gentoo Base System release 2.2