[Tickets #6872] Re: gpg keys pair

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/6872
-----------------------------------------------------------------------
 Ticket             | 6872
 Updated By         | kkkrrruuulll at yahoo.it
 Summary            | gpg keys pair
 Queue              | IMP
 Version            | 4.2
 Type               | Bug
 State              | Not A Bug
 Priority           | 1. Low
 Milestone          |
 Patch              |
 Owners             |
-----------------------------------------------------------------------


kkkrrruuulll at yahoo.it (2008-06-10 02:58) wrote:

>> i think that it's a high security risk to save private key into the
database
>
> Then don't use PGP on Horde if you find this not acceptable.

Indeed, for now I can not use it; but I like to use it in the future

>> i think that horde/imp must use keys (and keyrings) contained into
>> the private/hidden directory .gnupg of every user; horde/imp must use
>> gnupg command line (sudo'ed as spamassassin) for every operation
>
> What user directory?  Horde/IMP has no access to a user's home
directory.

not horde, but gnupg yes

if you run gnugp sudo'ed with the logged user, i think it can access the
user's home