Home → Stable →

Key Password Entry (web)

• Edit

blackhole999

30 Dec, 2011 07:23 AM

While I can see both sides of the argument I find it extremely irritating that the key password entry field does not support past. I use an external & portable password store, since for work I have to use OS X, Linux & Windows, and need to have passwords available in each OS. My GPG certificate password is randomly generated and exceeds 50 characters in length, entering it by hand is a royal pain. Can you please move away from a lowest common denominator approach in this respect and support past in the password entry field, anybody taking security seriously will clear their clipboard after copy/pasting a password and the rest are probably not using sufficently strong passwords. Basically your penalizing people that adopt strong security while pandering to the folks who are probably providing numerous other attack vectors anyway.

That's my $0.02 worth,

Ray

1. 1 Posted by Alex on 30 Dec, 2011 07:51 AM

   

   afaik Lukas or Roman already fixed this one - can you download version 2.0.18-2 from https://github.com/GPGTools/MacGPG2/downloads and tell us if it's working there?

   • Edit

2. 2 Posted by rains on 30 Dec, 2011 08:04 AM

   

   Dear Ray & all,

   I 2nd this (for the same reasons outlined below). And a sensible add-on feature to that would be an automatic flushing the clipboard cache immediately after pasting.

   Happy New Year celebrations to all,

   rains

   • Edit

3. 3 Posted by Alex on 30 Dec, 2011 08:09 AM

   

   It's already fixed in the above mentioned version (just tested it).

   • Edit

4. Alex closed this discussion on 30 Dec, 2011 08:09 AM.

5. Alex re-opened this discussion on 30 Dec, 2011 08:14 AM

6. Alex closed this discussion on 30 Dec, 2011 08:14 AM.