[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#466669: ITP: squirrelmail-gpg -- GnuPG plugin for SquirrelMail



On Wed, Feb 20, 2008 at 01:56:05AM -0800, Don Armstrong wrote:
> On Wed, 20 Feb 2008, Jan Hauke Rahm wrote:
> >   * Decrypt on reading encrypted message
> >   * Encrypt, Decrypt, and Sign Attachments
> >   * Sign messages and verify signatures
> 
> I really, really hope it's implementing in some incredibly novel way
> that doesn't involve having secret keys on the webserver (channeling
> Manoj) or *even* network accessible.

No, it doesn't. To sign and encrypt via a web application you need to
have the keys readable by the web server.

> Otherwise it's pretty much insta-buggy by design.

Kind of, yes...

Hauke

Attachment: signature.asc
Description: Digital signature


Reply to: