Re: Beware of leftover gpg-agent processes

2016-08-05 Thread Paul Wise
On Sat, Aug 6, 2016 at 12:41 AM, Daniel Kahn Gillmor wrote: > There are good reasons to want to have the agent running over time and > not terminating with the individual invocations of gpg1. In particular, > passphrase caching and smartcard management are useful features. I noticed after upgrad

Re: Beware of leftover gpg-agent processes

2016-08-05 Thread Stefano Zacchiroli
On Fri, Aug 05, 2016 at 12:41:18PM -0400, Daniel Kahn Gillmor wrote: > On desktop systems (where i'd expect the majority of secret key access > happens), for folks who are running systemd, i recommend enabling the > systemd user services, as documented in > /usr/share/doc/{gnupg-agent,dirmngr}/READ

Re: Beware of leftover gpg-agent processes

2016-08-05 Thread Peter Colberg
On Fri, Aug 05, 2016 at 12:41:18PM -0400, Daniel Kahn Gillmor wrote: > On desktop systems (where i'd expect the majority of secret key access > happens), for folks who are running systemd, i recommend enabling the > systemd user services, as documented in > /usr/share/doc/{gnupg-agent,dirmngr}/READ

Re: Beware of leftover gpg-agent processes

2016-08-05 Thread Daniel Kahn Gillmor
Ian Jackson writes: > Johannes Schauer writes ("Beware of leftover gpg-agent processes (was: Re: > Changes for GnuPG in debian)"): > >> Quoting Daniel Kahn Gillmor (2016-08-04 18:29:03) >> > One of the main differences is that all access to your secret key >> > will be handled through gpg-agent,

Re: Beware of leftover gpg-agent processes

2016-08-05 Thread Christian Seiler
On 08/05/2016 06:08 PM, Ian Jackson wrote: > Could we not have gpg2 not only automatically launch the agent, but > also automatically terminate it. This would provide the same UI and > same persistence properties as gpg1. Full ACK here, with the slight modification that the agent should only comm