Re: New Package Proposal Crypt_PGP

From: Date: Wed, 19 Mar 2003 13:08:24 +0000
Subject: Re: New Package Proposal Crypt_PGP
References: 1 2 3  Groups: php.pear.dev 
Request: Send a blank email to pear-dev+get-14442@lists.php.net to get a copy of this message
On Wed, 2003-03-19 at 13:11, Damian Alejandro Fernandez Sosa wrote: > On Wed, 2003-03-19 at 04:31, Christian Stocker wrote: > > > Looks like a quite extensive class ;) I just quickly skimmed through it > > and there's one point I don't like. You store the decrypted plain text > > on disk. Looks not like a very good idea, especially when you run that > > on a server, on which more than one has access > > > This is a GNU PGP flaw not a class flaw. > GPG is prepared to put the private, public keys and the message (when > you create then ) in a disk file. As much as I see in the documentation > GPG dont write then to stdout, it writes to 2 files (one for the > private and other to the public key). --output - wirtes the output to stdout ;) and it was just a general remark not really a if-this-feature-does-not-change-it-should-not-be-in-pear comment and something you (or the user) should be aware of. So you get a +1 from me anyway chregu

« previous php.pear.dev (#14442) next »