Where to save passphrases?

[Bob (Robert) Cavanaugh]

My two cents (FWIW):
At work I cache my passphrase for two hours only. It is a pain to re-enter the passphrase, but is required by our threat model. At home, each member of my family has their own computers and I cache my passphrase per session. However I always completely shut down my laptop, I do not hibernate or sleep.

Thanks,
 
Bob Cavanaugh

 

-----Original Message-----
From: Gnupg-users [mailto:gnupg-users-bounces at gnupg.org] On Behalf Of Werner Koch
Sent: Saturday, July 26, 2014 12:08 PM
To: Heinz Diehl
Cc: gnupg-users at gnupg.org
Subject: Re: Where to save passphrases?

On Sat, 26 Jul 2014 14:04, htd at fritha.org said:

> some serious sideeffects if somebody else than you e.g. could read
> your encrypted email, because all he/she has to do is to click on it
> (because the passphrase is still cached).

  gpgconf --reload gpg-agent

clears the passphrase cache.  Call that before leaving the computer.


Salam-Shalom,

   Werner


-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


_______________________________________________
Gnupg-users mailing list
Gnupg-users at gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users