<html><head></head><body>Maybe your password is stored in the gnome session? <br><br><div class="gmail_quote">On February 6, 2017 8:08:17 AM GMT+01:00, Johan Vromans <jvromans@squirrel.nl> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="k9mail">On Sun, 5 Feb 2017 22:21:10 +0100, Johan Vromans <jvromans@squirrel.nl><br />wrote:<br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> I assume it's my fault, but...<br /></blockquote><br />In any case, it's not claws.<br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> When I run gpg in a terminal window, it says that gpg-agent is not<br /> available and asks for the passphrase. Good.<br /></blockquote><br />Actually, there *is* a gpg-agent, and it is found by gpg2.<br />I assume the claws plugin also uses gpg2, either directly or indirectly.<br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> When I use claws to send a (GnuPG) signed e-mail, it does so without<br /> asking for the gpg passphrase. I don't recall I ever instructed claws to<br /> permanently store this passphrase. <br /></blockquote><br />Running gpg-agent with debugging reveals that it is contacted correctly.<br />Then it invokes pinentry to ask for the passphrase. Much to my surprise,<br />pinentry returns the desired information without popping up a dialog. So<br />apparently it is cached by pinentry, or Gnome, or whatever.<br /><br />Still scary, especially since I haven't found a way to stop this (IMHO<br />undesired) behaviour.<br /><br />-- Johan<br /><hr /><br />Users mailing list<br />Users@lists.claws-mail.org<br /><a href="http://lists.claws-mail.org/cgi-bin/mailman/listinfo/users">http://lists.claws-mail.org/cgi-bin/mailman/listinfo/users</a><br /></pre></blockquote></div><br>
-- <br>
Sent from my Android phone with K-9 Mail. Please excuse my brevity.</body>
<br>
----
This mail was virus scanned and spam checked before delivery.
This mail is also DKIM signed. See header dkim-signature.
<br></html>