[Mailman-Developers] GSOC Project idea: OpenPGP integration

[Stefan Schlott]

On 26.04.2013 20:55, Terri Oda wrote:

> I've been wondering about that... is there any time when the encrypted
> message on disk would be available but the private key not?

As already pointed out, there are (at least) two ways to avoid an
unprotected secret key (or the corresponding pass phrase, respectively)
on disk:

- Keep the passphrase only in RAM (e.g. entering it when starting
mailman or by using gpg-agent)
- Having the secret key on a smartcard


Stefan.