[kdepim-users] caching passphrases in KMail?

Ingo Klöcker kloecker at kde.org
Wed Dec 10 20:17:55 GMT 2008


On Tuesday 09 December 2008, Dexter Filmore wrote:
> Am Montag, 8. Dezember 2008 22:04:33 schrieb Anne Wilson:
> > On Monday 08 December 2008 19:07:10 Dexter Filmore wrote:
> > > Am Montag, 8. Dezember 2008 19:56:23 schrieb Anne Wilson:
> > > > On Monday 08 December 2008 18:07:38 Dexter Filmore wrote:
> > > > > So I fought my way through a gpg howto and got it working,
> > > > > but how do I make KMail cache passphrases?
> > > >
> > > > That's the biggest part done.  Now you just need to add
> > > > gpg-agent.
> > > >
> > > > Check that you have /usr/bin/gpg-agent
> > > > Add 'use-agent' to your gpg.conf file
> > > > Add ' eval "$(gpg-agent --daemon)" ' to your ~/.bashrc
> > > >
> > > > That will start the agent when you log in, and create
> > > > ~/.gpg-agent.conf, but you probably will need to manually enter
> > > > ' pinentry-program /usr/bin/pinentry- qt '
> > > >
> > > > That's it, really.
> > > >
> > > > Anne
> > >
> > > Thanks, but... we're at "manually fumbling something into some
> > > config file and have to re-do on every computer I work on."
> > > We're not getting anywhere. *I* can barely handle this, thinking
> > > about teaching someone like my sis to use this.. no go.
> >
> > You are joking, of course? :-)
> >
> > It has to be done once only, and the rest is automatic.  The same
> > gpg- agent.conf file can be copied onto every box - there is
> > nothing different from one box to another. Once there, it just
> > works.  Your sis will not even be aware of it, just appreciating
> > that she only has to enter a passphrase once every hour, or
> > whatever you set it to.
>
> I'm serious.

A good distribution should do this work for you and I think openSUSE 
does a pretty good job.


> And even after doing the setup it still is up to the 
> user to take care of the web-of-trust-thing and get other people to
> sign the key, retrieve public keys from other people, verify those
> keys by fingerprint and so on.

True. But the fact that you have to take care of all those things will 
hopefully make you think about what you are actually doing.


> Plus yesterday I tried and encrypt a message and KMail asks me
> something like "what Name in the Adress Book should be used for..."
> ...forgot the rest. Doesn't ask me that today in another test. Wth.

I guess KMail doesn't ask you anymore because by now the crypto settings 
for the test recipient have been stored without name in your address 
book.


Regards,
Ingo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
URL: <http://mail.kde.org/pipermail/kdepim-users/attachments/20081210/cb21588a/attachment.sig>
-------------- next part --------------
_______________________________________________
KDE PIM users mailing list
kdepim-users at kde.org
https://mail.kde.org/mailman/listinfo/kdepim-users


More information about the kdepim-users mailing list