GNU bug report logs - #29907
25.3; Easy PG should warn users that passphrases are not cached forever

Previous Next

Package: emacs;

Reported by: John Williams <johnfrombluff <at> gmail.com>

Date: Sat, 30 Dec 2017 02:20:01 UTC

Severity: normal

Tags: fixed

Found in version 25.3

Fixed in version 26.1

Done: Noam Postavsky <npostavs <at> users.sourceforge.net>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 29907 in the body.
You can then email your comments to 29907 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to bug-gnu-emacs <at> gnu.org:
bug#29907; Package emacs. (Sat, 30 Dec 2017 02:20:02 GMT) Full text and rfc822 format available.

Acknowledgement sent to John Williams <johnfrombluff <at> gmail.com>:
New bug report received and forwarded. Copy sent to bug-gnu-emacs <at> gnu.org. (Sat, 30 Dec 2017 02:20:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: John Williams <johnfrombluff <at> gmail.com>
To: "bug-gnu-emacs <at> gnu.org" <bug-gnu-emacs <at> gnu.org>
Subject: 25.3;
 Easy PG should warn users that passphrases are not cached forever
Date: Sat, 30 Dec 2017 02:18:36 +0000
[Message part 1 (text/plain, inline)]
I encrypted a file using Easy PG. When I did so, I specified a pass
phrase via a window manager pop-up dialog and checked the option to save
the pass phrase in the "keyring". I am using GNOME, so I assumed that
the "keyring" in question was Seahorse.

I opened the file again and was not prompted for the pass phrase. I was
happy. I rebooted to see if the cache was ephemeral, and lo, it was
not. I was happy.

A few days later, I attempted to open the file again, and was prompted
for the password. I had forgotten it, and now there is no way to access
the contents of the file. I am very sad, because the contents of the
file are worth about $20,000 to me.

Mea culpa. I should not have trusted software for such an important task
without reading the manual. But after reading the manual, I find no
mention that the pass phrase caching is ephemeral. After much Googling,
I found out about gpg-agent and max-cache-ttl.

I don't think it's reasonable to expect users to read long manuals, or
already be experts in underlying technology, in order to use simple
functionality. I also think the the dialog that prompts for a pass
phrase should inform the user about default-cache-ttl and max-cache-ttl.

I also think the dialog, and the manual, should emphasise very strongly
that pass phrases are not cached forever.

Thanks for Easy PG, and thanks for Emacs!

A grateful but very sad user



In GNU Emacs 25.3.1 (x86_64-redhat-linux-gnu, GTK+ Version 3.22.19)
 of 2017-09-15 built on buildvm-31.phx2.fedoraproject.org
Windowing system distributor 'Fedora Project', version 11.0.11905000
System Description:    Fedora release 27 (Twenty Seven)

Configured using:
 'configure --build=x86_64-redhat-linux-gnu
 --host=x86_64-redhat-linux-gnu --program-prefix=
 --disable-dependency-tracking --prefix=/usr --exec-prefix=/usr
 --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc
 --datadir=/usr/share --includedir=/usr/include --libdir=/usr/lib64
 --libexecdir=/usr/libexec --localstatedir=/var
 --sharedstatedir=/var/lib --mandir=/usr/share/man
 --infodir=/usr/share/info --with-dbus --with-gif --with-jpeg --with-png
 --with-rsvg --with-tiff --with-xft --with-xpm --with-x-toolkit=gtk3
 --with-gpm=no --with-xwidgets --with-modules
 build_alias=x86_64-redhat-linux-gnu host_alias=x86_64-redhat-linux-gnu
 'CFLAGS=-DMAIL_USE_LOCKF -O2 -g -pipe -Wall -Werror=format-security
 -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong
 --param=ssp-buffer-size=4 -grecord-gcc-switches
 -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=generic'
 LDFLAGS=-Wl,-z,relro
 PKG_CONFIG_PATH=:/usr/lib64/pkgconfig:/usr/share/pkgconfig'

Configured features:
XPM JPEG TIFF GIF PNG RSVG IMAGEMAGICK SOUND DBUS GCONF GSETTINGS NOTIFY
ACL LIBSELINUX GNUTLS LIBXML2 FREETYPE M17N_FLT LIBOTF XFT ZLIB
TOOLKIT_SCROLL_BARS GTK3 X11 MODULES XWIDGETS

Important settings:
  value of $LANG: en_NZ.UTF-8
  value of $XMODIFIERS: @im=ibus
  locale-coding-system: utf-8-unix

Major mode: Org

Minor modes in effect:
  flyspell-mode: t
  org-bullets-mode: t
  override-global-mode: t
  savehist-mode: t
  recentf-mode: t
  helm-mode: t
  async-bytecomp-package-mode: t
  desktop-save-mode: 1
  show-paren-mode: t
  shell-dirtrack-mode: t
  tooltip-mode: t
  global-eldoc-mode: t
  electric-indent-mode: t
  mouse-wheel-mode: t
  tool-bar-mode: t
  menu-bar-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  blink-cursor-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t
  column-number-mode: t
  line-number-mode: t
  auto-fill-function: org-auto-fill-function
  transient-mark-mode: t

Recent messages:
(No changes need to be saved)
Decrypting /home/john/Documents/Investment/Blockchain/keys.gpg...done
epa-file--find-file-not-found-function: Opening input file: Decryption
failed,
Quit [5 times]
(No changes need to be saved)
Saving file /home/john/Documents/Investment/Blockchain/credentials.org...
Wrote /home/john/Documents/Investment/Blockchain/credentials.org
Saving file /home/john/Documents/Investment/Blockchain/credentials.org...
Wrote /home/john/Documents/Investment/Blockchain/credentials.org
(No changes need to be saved)

Load-path shadows:
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-eww-20160521.1458/org-eww hides
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-eww
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-r-gui
hides /usr/share/emacs/site-lisp/ess/ess-r-gui
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-sp3-d
hides /usr/share/emacs/site-lisp/ess/ess-sp3-d
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/msdos hides
/usr/share/emacs/site-lisp/ess/msdos
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-noweb
hides /usr/share/emacs/site-lisp/ess/ess-noweb
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-s4-d hides
/usr/share/emacs/site-lisp/ess/ess-s4-d
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-sp5-d
hides /usr/share/emacs/site-lisp/ess/ess-sp5-d
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-roxy hides
/usr/share/emacs/site-lisp/ess/ess-roxy
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-inf hides
/usr/share/emacs/site-lisp/ess/ess-inf
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-vst-d
hides /usr/share/emacs/site-lisp/ess/ess-vst-d
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-sp6w-d
hides /usr/share/emacs/site-lisp/ess/ess-sp6w-d
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-dde hides
/usr/share/emacs/site-lisp/ess/ess-dde
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-sp6-d
hides /usr/share/emacs/site-lisp/ess/ess-sp6-d
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-eldoc
hides /usr/share/emacs/site-lisp/ess/ess-eldoc
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-r-package
hides /usr/share/emacs/site-lisp/ess/ess-r-package
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-rdired
hides /usr/share/emacs/site-lisp/ess/ess-rdired
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-site hides
/usr/share/emacs/site-lisp/ess/ess-site
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-generics
hides /usr/share/emacs/site-lisp/ess/ess-generics
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-sas-l
hides /usr/share/emacs/site-lisp/ess/ess-sas-l
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-sas-d
hides /usr/share/emacs/site-lisp/ess/ess-sas-d
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/essd-els hides
/usr/share/emacs/site-lisp/ess/essd-els
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-rutils
hides /usr/share/emacs/site-lisp/ess/ess-rutils
/home/john/Dropbox/Emacs/.emacs.d/elpa/julia-mode-20170916.628/julia-mode
hides /usr/share/emacs/site-lisp/ess/julia-mode
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-noweb-font-lock-mode
hides /usr/share/emacs/site-lisp/ess/ess-noweb-font-lock-mode
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-rd hides
/usr/share/emacs/site-lisp/ess/ess-rd
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-tracebug
hides /usr/share/emacs/site-lisp/ess/ess-tracebug
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-noweb-mode
hides /usr/share/emacs/site-lisp/ess/ess-noweb-mode
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-s3-d hides
/usr/share/emacs/site-lisp/ess/ess-s3-d
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-xls-d
hides /usr/share/emacs/site-lisp/ess/ess-xls-d
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-font-lock
hides /usr/share/emacs/site-lisp/ess/ess-font-lock
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-lsp-l
hides /usr/share/emacs/site-lisp/ess/ess-lsp-l
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-compat
hides /usr/share/emacs/site-lisp/ess/ess-compat
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-mode hides
/usr/share/emacs/site-lisp/ess/ess-mode
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-jags-d
hides /usr/share/emacs/site-lisp/ess/ess-jags-d
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-mouse
hides /usr/share/emacs/site-lisp/ess/ess-mouse
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-custom
hides /usr/share/emacs/site-lisp/ess/ess-custom
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-r-args
hides /usr/share/emacs/site-lisp/ess/ess-r-args
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-omg-d
hides /usr/share/emacs/site-lisp/ess/ess-omg-d
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-bugs-d
hides /usr/share/emacs/site-lisp/ess/ess-bugs-d
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-bugs-l
hides /usr/share/emacs/site-lisp/ess/ess-bugs-l
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-julia
hides /usr/share/emacs/site-lisp/ess/ess-julia
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-help hides
/usr/share/emacs/site-lisp/ess/ess-help
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-r-syntax
hides /usr/share/emacs/site-lisp/ess/ess-r-syntax
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-comp hides
/usr/share/emacs/site-lisp/ess/ess-comp
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess hides
/usr/share/emacs/site-lisp/ess/ess
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-gretl
hides /usr/share/emacs/site-lisp/ess/ess-gretl
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-utils
hides /usr/share/emacs/site-lisp/ess/ess-utils
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-omg-l
hides /usr/share/emacs/site-lisp/ess/ess-omg-l
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-toolbar
hides /usr/share/emacs/site-lisp/ess/ess-toolbar
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-r-completion
hides /usr/share/emacs/site-lisp/ess/ess-r-completion
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-trns hides
/usr/share/emacs/site-lisp/ess/ess-trns
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/make-regexp
hides /usr/share/emacs/site-lisp/ess/make-regexp
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-sp4-d
hides /usr/share/emacs/site-lisp/ess/ess-sp4-d
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-arc-d
hides /usr/share/emacs/site-lisp/ess/ess-arc-d
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/mouseme hides
/usr/share/emacs/site-lisp/ess/mouseme
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-swv hides
/usr/share/emacs/site-lisp/ess/ess-swv
/home/john/Dropbox/Emacs/.emacs.d/elpa/ess-20171030.820/lisp/ess-sas-a
hides /usr/share/emacs/site-lisp/ess/ess-sas-a
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-css hides
/usr/share/emacs/25.3/lisp/org/ob-css
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-protocol hides
/usr/share/emacs/25.3/lisp/org/org-protocol
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-dot hides
/usr/share/emacs/25.3/lisp/org/ob-dot
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-indent hides
/usr/share/emacs/25.3/lisp/org/org-indent
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-R hides
/usr/share/emacs/25.3/lisp/org/ob-R
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-macs hides
/usr/share/emacs/25.3/lisp/org/org-macs
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-agenda hides
/usr/share/emacs/25.3/lisp/org/org-agenda
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-datetree hides
/usr/share/emacs/25.3/lisp/org/org-datetree
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-perl hides
/usr/share/emacs/25.3/lisp/org/ob-perl
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-element hides
/usr/share/emacs/25.3/lisp/org/org-element
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-matlab hides
/usr/share/emacs/25.3/lisp/org/ob-matlab
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-io hides
/usr/share/emacs/25.3/lisp/org/ob-io
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-awk hides
/usr/share/emacs/25.3/lisp/org/ob-awk
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org hides
/usr/share/emacs/25.3/lisp/org/org
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-mscgen hides
/usr/share/emacs/25.3/lisp/org/ob-mscgen
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-emacs-lisp hides
/usr/share/emacs/25.3/lisp/org/ob-emacs-lisp
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ox-ascii hides
/usr/share/emacs/25.3/lisp/org/ox-ascii
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-core hides
/usr/share/emacs/25.3/lisp/org/ob-core
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-lisp hides
/usr/share/emacs/25.3/lisp/org/ob-lisp
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob hides
/usr/share/emacs/25.3/lisp/org/ob
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-list hides
/usr/share/emacs/25.3/lisp/org/org-list
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-C hides
/usr/share/emacs/25.3/lisp/org/ob-C
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-bibtex hides
/usr/share/emacs/25.3/lisp/org/org-bibtex
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-info hides
/usr/share/emacs/25.3/lisp/org/org-info
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-eval hides
/usr/share/emacs/25.3/lisp/org/ob-eval
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-table hides
/usr/share/emacs/25.3/lisp/org/org-table
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-attach hides
/usr/share/emacs/25.3/lisp/org/org-attach
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-ctags hides
/usr/share/emacs/25.3/lisp/org/org-ctags
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-exp hides
/usr/share/emacs/25.3/lisp/org/ob-exp
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-id hides
/usr/share/emacs/25.3/lisp/org/org-id
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-haskell hides
/usr/share/emacs/25.3/lisp/org/ob-haskell
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-compat hides
/usr/share/emacs/25.3/lisp/org/org-compat
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-eshell hides
/usr/share/emacs/25.3/lisp/org/org-eshell
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-latex hides
/usr/share/emacs/25.3/lisp/org/ob-latex
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-octave hides
/usr/share/emacs/25.3/lisp/org/ob-octave
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-bbdb hides
/usr/share/emacs/25.3/lisp/org/org-bbdb
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-pcomplete hides
/usr/share/emacs/25.3/lisp/org/org-pcomplete
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-irc hides
/usr/share/emacs/25.3/lisp/org/org-irc
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-sass hides
/usr/share/emacs/25.3/lisp/org/ob-sass
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-footnote hides
/usr/share/emacs/25.3/lisp/org/org-footnote
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-tangle hides
/usr/share/emacs/25.3/lisp/org/ob-tangle
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ox-md hides
/usr/share/emacs/25.3/lisp/org/ox-md
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ox-beamer hides
/usr/share/emacs/25.3/lisp/org/ox-beamer
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ox-publish hides
/usr/share/emacs/25.3/lisp/org/ox-publish
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-mhe hides
/usr/share/emacs/25.3/lisp/org/org-mhe
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-rmail hides
/usr/share/emacs/25.3/lisp/org/org-rmail
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-feed hides
/usr/share/emacs/25.3/lisp/org/org-feed
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-maxima hides
/usr/share/emacs/25.3/lisp/org/ob-maxima
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-clock hides
/usr/share/emacs/25.3/lisp/org/org-clock
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-macro hides
/usr/share/emacs/25.3/lisp/org/org-macro
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-clojure hides
/usr/share/emacs/25.3/lisp/org/ob-clojure
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-inlinetask hides
/usr/share/emacs/25.3/lisp/org/org-inlinetask
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-habit hides
/usr/share/emacs/25.3/lisp/org/org-habit
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ox hides
/usr/share/emacs/25.3/lisp/org/ox
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-gnuplot hides
/usr/share/emacs/25.3/lisp/org/ob-gnuplot
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-ocaml hides
/usr/share/emacs/25.3/lisp/org/ob-ocaml
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ox-man hides
/usr/share/emacs/25.3/lisp/org/ox-man
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-docview hides
/usr/share/emacs/25.3/lisp/org/org-docview
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-plot hides
/usr/share/emacs/25.3/lisp/org/org-plot
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-version hides
/usr/share/emacs/25.3/lisp/org/org-version
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-w3m hides
/usr/share/emacs/25.3/lisp/org/org-w3m
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-keys hides
/usr/share/emacs/25.3/lisp/org/ob-keys
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-org hides
/usr/share/emacs/25.3/lisp/org/ob-org
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-shen hides
/usr/share/emacs/25.3/lisp/org/ob-shen
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ox-html hides
/usr/share/emacs/25.3/lisp/org/ox-html
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-java hides
/usr/share/emacs/25.3/lisp/org/ob-java
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-picolisp hides
/usr/share/emacs/25.3/lisp/org/ob-picolisp
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-crypt hides
/usr/share/emacs/25.3/lisp/org/org-crypt
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-install hides
/usr/share/emacs/25.3/lisp/org/org-install
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ox-odt hides
/usr/share/emacs/25.3/lisp/org/ox-odt
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-faces hides
/usr/share/emacs/25.3/lisp/org/org-faces
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-lob hides
/usr/share/emacs/25.3/lisp/org/ob-lob
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ox-texinfo hides
/usr/share/emacs/25.3/lisp/org/ox-texinfo
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-python hides
/usr/share/emacs/25.3/lisp/org/ob-python
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-ledger hides
/usr/share/emacs/25.3/lisp/org/ob-ledger
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-table hides
/usr/share/emacs/25.3/lisp/org/ob-table
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-lilypond hides
/usr/share/emacs/25.3/lisp/org/ob-lilypond
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-mouse hides
/usr/share/emacs/25.3/lisp/org/org-mouse
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-js hides
/usr/share/emacs/25.3/lisp/org/ob-js
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ox-icalendar hides
/usr/share/emacs/25.3/lisp/org/ox-icalendar
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-capture hides
/usr/share/emacs/25.3/lisp/org/org-capture
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-ruby hides
/usr/share/emacs/25.3/lisp/org/ob-ruby
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-ref hides
/usr/share/emacs/25.3/lisp/org/ob-ref
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-entities hides
/usr/share/emacs/25.3/lisp/org/org-entities
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-fortran hides
/usr/share/emacs/25.3/lisp/org/ob-fortran
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-timer hides
/usr/share/emacs/25.3/lisp/org/org-timer
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-plantuml hides
/usr/share/emacs/25.3/lisp/org/ob-plantuml
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-ditaa hides
/usr/share/emacs/25.3/lisp/org/ob-ditaa
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-sqlite hides
/usr/share/emacs/25.3/lisp/org/ob-sqlite
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-src hides
/usr/share/emacs/25.3/lisp/org/org-src
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-makefile hides
/usr/share/emacs/25.3/lisp/org/ob-makefile
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ox-org hides
/usr/share/emacs/25.3/lisp/org/ox-org
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-comint hides
/usr/share/emacs/25.3/lisp/org/ob-comint
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-archive hides
/usr/share/emacs/25.3/lisp/org/org-archive
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-sql hides
/usr/share/emacs/25.3/lisp/org/ob-sql
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-screen hides
/usr/share/emacs/25.3/lisp/org/ob-screen
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-scheme hides
/usr/share/emacs/25.3/lisp/org/ob-scheme
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-asymptote hides
/usr/share/emacs/25.3/lisp/org/ob-asymptote
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-colview hides
/usr/share/emacs/25.3/lisp/org/org-colview
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ox-latex hides
/usr/share/emacs/25.3/lisp/org/ox-latex
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-loaddefs hides
/usr/share/emacs/25.3/lisp/org/org-loaddefs
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-mobile hides
/usr/share/emacs/25.3/lisp/org/org-mobile
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/org-gnus hides
/usr/share/emacs/25.3/lisp/org/org-gnus
/home/john/Dropbox/Emacs/.emacs.d/elpa/org-20171030/ob-calc hides
/usr/share/emacs/25.3/lisp/org/ob-calc
/home/john/Dropbox/Emacs/.emacs.d/elpa/soap-client-3.1.3/soap-inspect hides
/usr/share/emacs/25.3/lisp/net/soap-inspect
/home/john/Dropbox/Emacs/.emacs.d/elpa/soap-client-3.1.3/soap-client hides
/usr/share/emacs/25.3/lisp/net/soap-client
/home/john/Dropbox/Emacs/.emacs.d/elpa/ntlm-2.1.0/ntlm hides
/usr/share/emacs/25.3/lisp/net/ntlm
/home/john/Dropbox/Emacs/.emacs.d/elpa/let-alist-1.0.5/let-alist hides
/usr/share/emacs/25.3/lisp/emacs-lisp/let-alist
/home/john/Dropbox/Emacs/.emacs.d/elpa/seq-2.20/seq hides
/usr/share/emacs/25.3/lisp/emacs-lisp/seq

Features:
(shadow bbdb-message bbdb-migrate mailalias mail-extr emacsbug
helm-x-files helm-for-files helm-bookmark helm-adaptive helm-external
winner helm-command helm-elisp helm-eval edebug helm-info epa-file
misearch multi-isearch reftex-parse python tramp-sh org-duration
flyspell org-bullets image-file org-rmail org-mhe org-irc org-info
org-gnus org-docview org-bbdb org-w3m perl-mode typopunct printing
ps-print ps-def lpr calfw-org org-capture org-agenda calfw holidays
hol-loaddefs diminish use-package use-package-ensure use-package-delight
use-package-diminish use-package-bind-key bind-key use-package-core
metaweblog xml-rpc ispell eudcb-ldap eudc eudc-options-file eudc-vars
ldap savehist recentf tree-widget smart-mode-line-powerline-theme
smart-mode-line rich-minority powerline powerline-separators color
powerline-themes helm-mode helm-files helm-buffers helm-tags helm-locate
helm-grep helm-regexp helm-types emms-info-libtag emms-librefm-stream
emms-librefm-scrobbler emms-playlist-limit emms-volume
emms-volume-amixer emms-i18n emms-history emms-score emms-stream-info
emms-metaplaylist-mode emms-bookmarks emms-cue emms-mode-line-icon
emms-browser sort emms-playlist-sort emms-last-played emms-player-xine
emms-player-mpd emms-playing-time emms-lyrics emms-url emms-streams
emms-show-all emms-tag-editor emms-mark emms-mode-line emms-cache
emms-info-ogginfo emms-info-mp3info emms-info later-do
emms-playlist-mode emms-player-vlc emms-player-mplayer
emms-player-simple emms-source-playlist emms-source-file locate
emms-setup emms emms-compat bbdb-mua bbdb-com crm bbdb bbdb-site org-ref
org-ref-helm-bibtex org-ref-helm helm-utils helm-bibtex
bibtex-completion biblio biblio-download biblio-dissemin biblio-hal
biblio-dblp biblio-crossref biblio-arxiv timezone biblio-doi biblio-core
let-alist url-queue helm-net helm-help helm helm-source helm-multi-match
helm-lib helm-config helm-easymenu async-bytecomp async org-ref-core
warnings reftex-cite reftex reftex-vars parsebib ox-texinfo ox-odt
rng-loc rng-uri rng-parse rng-match rng-dt rng-util rng-pttrn nxml-parse
nxml-ns nxml-enc xmltok nxml-util ox-latex ox-icalendar ox-html table
ox-ascii ox-publish ox org-ref-glossary org-ref-bibtex org-ref-citeproc
key-chord hydra lv doi-utils org-ref-utils org-ref-pdf pdf-tools
cus-edit wid-edit pdf-view bookmark pp pdf-cache pdf-info tq pdf-util
url-http tls gnutls url-gw org-bibtex bibtex f org-gcal org-archive
request-deferred deferred request url url-proxy url-privacy url-expand
url-methods url-history url-cookie url-domsuf url-util mailcap ob-python
ob-R org-clock mu4e-alert time alert log4e notifications dbus xml gntp
mu4e-maildirs-extension mu4e desktop frameset mu4e-speedbar speedbar
sb-image ezimage dframe mu4e-main mu4e-view epa derived mu4e-headers
mu4e-compose mu4e-context mu4e-draft mu4e-actions rfc2368 mu4e-mark
mu4e-message flow-fill html2text mu4e-proc mu4e-utils doc-view subr-x
jka-compr image-mode mu4e-lists mu4e-vars message idna dired rfc822 mml
mml-sec epg mm-decode mm-bodies mm-encode mail-parse rfc2231 mailabbrev
gmm-utils mailheader hl-line mu4e-meta smtpmail sendmail rfc2047 rfc2045
ietf-drums mail-utils starttls edmacro kmacro org-element avl-tree org
org-macro org-footnote org-pcomplete org-list org-faces org-entities
org-version ob-emacs-lisp ob ob-tangle org-src ob-ref ob-lob ob-table
ob-keys ob-exp ob-comint ob-core ob-eval org-compat org-macs
org-loaddefs find-func cal-menu calendar cal-loaddefs finder-inf
tex-site gh-common gh-profile rx s marshal eieio-compat ht json map dash
org2blog-autoloads url-auth url-parse url-vars info package epg-config
paren cus-start cus-load ido seq ess-toolbar ess-mouse mouseme thingatpt
browse-url ess-menu ess-swv ess-noweb ess-noweb-font-lock-mode
ess-bugs-l essd-els ess-sas-d ess-sas-l ess-sas-a ess-sta-d ess-sta-l
cc-vars cc-defs make-regexp ess-sp6-d ess-dde ess-sp3-d ess-julia
julia-mode ess-r-d ess-r-syntax ess-r-completion ess-roxy essddr
noutline outline easy-mmode hideshow ess-help ess-r-package ess-s-l ess
ess-inf ess-tracebug compile tramp tramp-compat auth-source cl-seq eieio
byte-opt bytecomp byte-compile cl-extra cconv eieio-core gnus-util
mm-util help-fns help-mode mail-prsvr password-cache tramp-loaddefs
cl-macs trampver ucs-normalize shell pcomplete comint ansi-color ring
format-spec advice ess-mode ess-noweb-mode ess-utils ess-generics cl gv
cl-loaddefs pcase cl-lib ess-custom executable easymenu ess-compat
ess-site time-date mule-util tooltip eldoc electric uniquify ediff-hook
vc-hooks lisp-float-type mwheel x-win term/common-win x-dnd tool-bar dnd
fontset image regexp-opt fringe tabulated-list newcomment elisp-mode
lisp-mode prog-mode register page menu-bar rfn-eshadow timer select
scroll-bar mouse jit-lock font-lock syntax facemenu font-core frame
cl-generic cham georgian utf-8-lang misc-lang vietnamese tibetan thai
tai-viet lao korean japanese eucjp-ms cp51932 hebrew greek romanian
slovak czech european ethiopic indian cyrillic chinese charscript
case-table epa-hook jka-cmpr-hook help simple abbrev minibuffer
cl-preloaded nadvice loaddefs button faces cus-face macroexp files
text-properties overlay sha1 md5 base64 format env code-pages mule
custom widget hashtable-print-readable backquote dbusbind inotify
dynamic-setting system-font-setting font-render-setting xwidget-internal
move-toolbar gtk x-toolkit x multi-tty make-network-process emacs)

Memory information:
((conses 16 817941 89123)
 (symbols 48 61400 0)
 (miscs 40 1855 1360)
 (strings 32 214248 15338)
 (string-bytes 1 7264949)
 (vectors 16 87530)
 (vector-slots 8 1355390 97517)
 (floats 8 1206 697)
 (intervals 56 5074 2609)
 (buffers 976 45))
[Message part 2 (text/html, inline)]

Information forwarded to bug-gnu-emacs <at> gnu.org:
bug#29907; Package emacs. (Sun, 28 Jan 2018 16:30:02 GMT) Full text and rfc822 format available.

Message #8 received at 29907 <at> debbugs.gnu.org (full text, mbox):

From: Noam Postavsky <npostavs <at> users.sourceforge.net>
To: John Williams <johnfrombluff <at> gmail.com>
Cc: 29907 <at> debbugs.gnu.org
Subject: Re: bug#29907: 25.3;
 Easy PG should warn users that passphrases are not cached forever
Date: Sun, 28 Jan 2018 11:29:45 -0500
John Williams <johnfrombluff <at> gmail.com> writes:

> I encrypted a file using Easy PG. When I did so, I specified a pass
> phrase via a window manager pop-up dialog and checked the option to
> save the pass phrase in the "keyring". I am using GNOME, so I assumed
> that the "keyring" in question was Seahorse.
>
> I opened the file again and was not prompted for the pass phrase. I
> was happy. I rebooted to see if the cache was ephemeral, and lo, it
> was not. I was happy.
>
> A few days later, I attempted to open the file again, and was prompted
> for the password. I had forgotten it, and now there is no way to
> access the contents of the file. I am very sad, because the contents
> of the file are worth about $20,000 to me.

Hmm, I don't think gpg-agent caches over reboots, so I wonder what saved
your pass phrase the first time.

> Mea culpa. I should not have trusted software for such an important
> task without reading the manual. But after reading the manual, I find
> no mention that the pass phrase caching is ephemeral. After much
> Googling, I found out about gpg-agent and max-cache-ttl.
>
> I don't think it's reasonable to expect users to read long manuals, or
> already be experts in underlying technology, in order to use simple
> functionality. I also think the the dialog that prompts for a pass
> phrase should inform the user about default-cache-ttl and
> max-cache-ttl.
>
> I also think the dialog, and the manual, should emphasise very
> strongly that pass phrases are not cached forever.

I somewhat feel that the term "cache" already implies temporary, but
saying it explicitly shouldn't hurt I guess.  Emacs is not in control of
the dialog at all, so we cannot affect that.

--- i/doc/misc/epa.texi
+++ w/doc/misc/epa.texi
@@ -474,7 +474,9 @@ Caching Passphrases
 
 Typing passphrases is a troublesome task if you frequently open and
 close the same file.  GnuPG and EasyPG Assistant provide mechanisms to
-remember your passphrases.  However, the configuration is a bit
+remember your passphrases for a limited time.  Using these, you only
+need to re-enter the passphrase occasionally.
+However, the configuration is a bit
 confusing since it depends on your GnuPG installation <at> xref{GnuPG
 version compatibility}, encryption method (symmetric or public key),
 and whether or not you want to use gpg-agent.  Here are some




Information forwarded to bug-gnu-emacs <at> gnu.org:
bug#29907; Package emacs. (Sun, 28 Jan 2018 18:32:02 GMT) Full text and rfc822 format available.

Message #11 received at 29907 <at> debbugs.gnu.org (full text, mbox):

From: John Williams <johnfrombluff <at> gmail.com>
To: Noam Postavsky <npostavs <at> users.sourceforge.net>
Cc: 29907 <at> debbugs.gnu.org
Subject: Re: bug#29907: 25.3; Easy PG should warn users that passphrases are
 not cached forever
Date: Sun, 28 Jan 2018 18:31:28 +0000
[Message part 1 (text/plain, inline)]
Thanks!

On Mon, 29 Jan 2018 at 05:29 Noam Postavsky <npostavs <at> users.sourceforge.net>
wrote:

> John Williams <johnfrombluff <at> gmail.com> writes:
>
> > I encrypted a file using Easy PG. When I did so, I specified a pass
> > phrase via a window manager pop-up dialog and checked the option to
> > save the pass phrase in the "keyring". I am using GNOME, so I assumed
> > that the "keyring" in question was Seahorse.
> >
> > I opened the file again and was not prompted for the pass phrase. I
> > was happy. I rebooted to see if the cache was ephemeral, and lo, it
> > was not. I was happy.
> >
> > A few days later, I attempted to open the file again, and was prompted
> > for the password. I had forgotten it, and now there is no way to
> > access the contents of the file. I am very sad, because the contents
> > of the file are worth about $20,000 to me.
>
> Hmm, I don't think gpg-agent caches over reboots, so I wonder what saved
> your pass phrase the first time.
>
> > Mea culpa. I should not have trusted software for such an important
> > task without reading the manual. But after reading the manual, I find
> > no mention that the pass phrase caching is ephemeral. After much
> > Googling, I found out about gpg-agent and max-cache-ttl.
> >
> > I don't think it's reasonable to expect users to read long manuals, or
> > already be experts in underlying technology, in order to use simple
> > functionality. I also think the the dialog that prompts for a pass
> > phrase should inform the user about default-cache-ttl and
> > max-cache-ttl.
> >
> > I also think the dialog, and the manual, should emphasise very
> > strongly that pass phrases are not cached forever.
>
> I somewhat feel that the term "cache" already implies temporary, but
> saying it explicitly shouldn't hurt I guess.  Emacs is not in control of
> the dialog at all, so we cannot affect that.
>
> --- i/doc/misc/epa.texi
> +++ w/doc/misc/epa.texi
> @@ -474,7 +474,9 @@ Caching Passphrases
>
>  Typing passphrases is a troublesome task if you frequently open and
>  close the same file.  GnuPG and EasyPG Assistant provide mechanisms to
> -remember your passphrases.  However, the configuration is a bit
> +remember your passphrases for a limited time.  Using these, you only
> +need to re-enter the passphrase occasionally.
> +However, the configuration is a bit
>  confusing since it depends on your GnuPG installation <at> xref{GnuPG
>  version compatibility}, encryption method (symmetric or public key),
>  and whether or not you want to use gpg-agent.  Here are some
>
[Message part 2 (text/html, inline)]

Information forwarded to bug-gnu-emacs <at> gnu.org:
bug#29907; Package emacs. (Wed, 31 Jan 2018 03:38:02 GMT) Full text and rfc822 format available.

Message #14 received at 29907 <at> debbugs.gnu.org (full text, mbox):

From: Noam Postavsky <npostavs <at> users.sourceforge.net>
To: John Williams <johnfrombluff <at> gmail.com>
Cc: 29907 <at> debbugs.gnu.org
Subject: Re: bug#29907: 25.3;
 Easy PG should warn users that passphrases are not cached forever
Date: Tue, 30 Jan 2018 22:36:52 -0500
tags 29907 fixed
close 29907 26.1
quit

John Williams <johnfrombluff <at> gmail.com> writes:

> Thanks! 

>      close the same file.  GnuPG and EasyPG Assistant provide mechanisms to
>     -remember your passphrases.  However, the configuration is a bit
>     +remember your passphrases for a limited time.  Using these, you only
>     +need to re-enter the passphrase occasionally.

Pushed to emacs-26

[1: 9e6889c65a]: 2018-01-30 22:14:02 -0500
  Emphasize that GPG passphrase caching is temporary (Bug#29907)
  https://git.savannah.gnu.org/cgit/emacs.git/commit/?id=9e6889c65af15b80db3f19064a765c1d3a198b87




Added tag(s) fixed. Request was from Noam Postavsky <npostavs <at> users.sourceforge.net> to control <at> debbugs.gnu.org. (Wed, 31 Jan 2018 03:38:03 GMT) Full text and rfc822 format available.

bug marked as fixed in version 26.1, send any further explanations to 29907 <at> debbugs.gnu.org and John Williams <johnfrombluff <at> gmail.com> Request was from Noam Postavsky <npostavs <at> users.sourceforge.net> to control <at> debbugs.gnu.org. (Wed, 31 Jan 2018 03:38:03 GMT) Full text and rfc822 format available.

bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Wed, 28 Feb 2018 12:24:04 GMT) Full text and rfc822 format available.

This bug report was last modified 6 years and 52 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.