Re: New Package Proposal Crypt_PGP
| From: | Christian Stocker | Date: | Wed, 19 Mar 2003 07:31:14 +0000 |
| Subject: | Re: New Package Proposal Crypt_PGP | ||
| References: | 1 | Groups: | php.pear.dev |
| Request: | Send a blank email to pear-dev+get-14428@lists.php.net to get a copy of this message | ||
Hi
On Mon, 2003-03-17 at 23:10, Damian Alejandro Fernandez Sosa wrote:
> I created a PEAR Class based on the excelent work of Michael Slusarz
> <slusarz@bigworm.colorado.edu> for the Horde Project
> (http://www.horde.org) to allow all the PEAR community to use PGP
> functionality.
Looks like a quite extensive class ;) I just quickly skimmed through it
and there's one point I don't like. You store the decrypted plain text
on disk. Looks not like a very good idea, especially when you run that
on a server, on which more than one has access (besides storing private
PGP keys on a public webserver isn't a very bright idea at all ;) )
I don't know a proper solution for that. I used pipes back then, when I
implemented something similar (but much less featurefull), but this had
also some security issues...
chregu