diff options
author | Daniel Kahn Gillmor <dkg@fifthhorseman.net> | 2019-11-09 16:48:14 -0500 |
---|---|---|
committer | Sean Whitton <spwhitton@spwhitton.name> | 2019-11-10 00:59:28 -0700 |
commit | e910230a9fb8a5151bede6d043679ec50570290f (patch) | |
tree | c96bfbda91a332944ed4ece13ab0aba20a9d2903 /notmuch-import-patch.1.pod | |
parent | bc35cd2bd19d4e29c46289c831170327f5c8e161 (diff) | |
download | mailscripts-e910230a9fb8a5151bede6d043679ec50570290f.tar.gz |
email-print-mime-structure: Add --use-gpg-agent for decryption
In some cases, the user may want to try to use their own GnuPG secret
keys to decrypt encrypted parts of the message.
By default it is disabled so that we aren't accidentally triggering
the use of user secret key material.
Note that gpg(1) says:
It is highly recommended to use [--batch] along with the options
--status-fd and --with-colons for any unattended use of gpg.
I am deliberately choosing to not use either --status-fd or
--with-colons for email-print-mime-structure.
I'm not using --with-colons because there is no output from GnuPG that
we expect to be machine-readable -- we're just looking for the cleartext
of whatever ciphertext is in the message part.
I'm not using --status-fd because there is nothing actionable we can do
with GnuPG status messages, and asking for them would require switching
from subprocess.run to subprocess.Popen to take advantage of the
pass_fds argument, which in turn would make the script only work in a
POSIX environment (I believe, but have not tested, that the script can
currently be used on Windows).
Signed-off-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Diffstat (limited to 'notmuch-import-patch.1.pod')
0 files changed, 0 insertions, 0 deletions