Suppressing passphrase prompt
David T-G
davidtg-gnupg@justpickone.org
Sat Jun 22 05:15:02 2002
--3siQDZowHQqNOShm
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Steven, et al --
=2E..and then Steven Handleman said...
%=20
% Hi All,
Hello!
%=20
% I am a new user to GPG and I am hoping that someone on this list can=20
% provide an easy answer to this. When I try to sign & encrypt a file (--s=
ign --
% encrypt --armor), gpg prompts me for a passphrase for my secret key. Is=
=20
% there any way to suppress this prompt? I need to suppress it because the=
=20
% encryption is going to become part of an automated batch file.
If you don't have to sign then you won't need any input; encryption alone
doesn't require a passphrase.
If you do have to sign, it seems to me at least as secure to use a key
with no passphrase as it does to put your passphrase in code somewhere
(which sounds horribly insecure, with nowhere to go but up), so null it
out (perhaps make a new key specifically for this purpose) and sign away.
Hey, you experts on the list -- am I the only one who is astonished and
appalled at people putting their passphrases in code somewhere? Am I
wrong and hard-coding is somehow safer than a guarded key?
%=20
% TIA,
% Steven Handleman
% IT Manager
% Geewax, Terker and Co.
% systems@geewax.com
HTH & HAND
:-D
--=20
David T-G * It's easier to fight for one's principles
(play) davidtg@justpickone.org * than to live up to them. -- fortune cookie
(work) davidtgwork@justpickone.org
http://www.justpickone.org/davidtg/ Shpx gur Pbzzhavpngvbaf Qrprapl Npg!
--3siQDZowHQqNOShm
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
iD8DBQE9E+vjGb7uCXufRwARAk3MAKC1/YMVHPx7wcODJdxlt9Qtv93m/wCfQQXX
9johHcZDXf+rkyOXF0NPW+o=
=akOM
-----END PGP SIGNATURE-----
--3siQDZowHQqNOShm--