[Tickets #6872] Re: gpg keys pair

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/6872
-----------------------------------------------------------------------
 Ticket             | 6872
 Updated By         | Michael Slusarz <slusarz at horde.org>
 Summary            | gpg keys pair
 Queue              | IMP
 Version            | 4.2
 Type               | Bug
-State              | Unconfirmed
+State              | Not A Bug
-Priority           | 3. High
+Priority           | 1. Low
 Milestone          |
 Patch              |
 Owners             |
-----------------------------------------------------------------------


Michael Slusarz <slusarz at horde.org> (2008-06-09 12:44) wrote:

> i think that it's a high security risk to save private key into the
database

Then don't use PGP on Horde if you find this not acceptable.

> i think that horde/imp must use keys (and keyrings) contained into
> the private/hidden directory .gnupg of every user; horde/imp must use
> gnupg command line (sudo'ed as spamassassin) for every operation

What user directory?  Horde/IMP has no access to a user's home directory.