Re: New Package Proposal Crypt_PGP

From: Date: Wed, 19 Mar 2003 07:31:14 +0000
Subject: Re: New Package Proposal Crypt_PGP
References: 1  Groups: php.pear.dev 
Request: Send a blank email to pear-dev+get-14428@lists.php.net to get a copy of this message
Hi On Mon, 2003-03-17 at 23:10, Damian Alejandro Fernandez Sosa wrote: > I created a PEAR Class based on the excelent work of Michael Slusarz > <slusarz@bigworm.colorado.edu> for the Horde Project > (http://www.horde.org) to allow all the PEAR community to use PGP > functionality. Looks like a quite extensive class ;) I just quickly skimmed through it and there's one point I don't like. You store the decrypted plain text on disk. Looks not like a very good idea, especially when you run that on a server, on which more than one has access (besides storing private PGP keys on a public webserver isn't a very bright idea at all ;) ) I don't know a proper solution for that. I used pipes back then, when I implemented something similar (but much less featurefull), but this had also some security issues... chregu

« previous php.pear.dev (#14428) next »