Pinentry should have a command line option to disable the emacs-based pinentry.
The motivation is to prevent attacks on GPG Agent. See T2034 for details.
Description
Description
| Status | Assigned | Task | ||
|---|---|---|---|---|
| Resolved | neal | T2034 pinentry emacs features need documentation | ||
| Resolved | • werner | T2057 Add a command line option to pinentry that disables emacs support |
Event Timeline
Comment Actions
gpg-agent requires that you add
--enable-emacs-pinentry.
to gpgagent.con. This is similar to
--no-allow-external-cache
but even not enabled by default.