Subject: PINE 3.92 - [PGP] - When!?

From: [email-masked] (Lester Vecsey)
Date: 11 Aug 1995 01:11:51 GMT

So when will PINE 3.92 be released and how seamless will the PGP be 
integrated into it?

--

---

From: [email-masked] (Robert A. Pickering Jr.)
Date: 14 Aug 1995 01:17:06 GMT

Well, I mentioned this before, but I hope the integration isn't too
seamless.

The problem with seamless integration is that it causes one to loose
all the benefits of having a pass phrase in the first place.  
Digital signatures are only meaningful if you can guarantee that 
the person sending the message is the person who signed it.  If I have
a program that automatically signs my mail, then if I leave my terminal
unattended or if someone guesses my password to my account (something that
is limited to 8 characters on my Unix account) then I'm hosed.  All they
have to do is send mail, and poof, my signature appears.

That's not the functionality I'm looking for.  And if it automatically
decrypts items that are encrypted with my public key.  That's even worse.

Just my $0.02 worth.  I'll now get off my soapbox.  You may return
to your regularily scheduled program.

-Rob

Lester Vecsey ([email-masked]) wrote:
: So when will PINE 3.92 be released and how seamless will the PGP be 
: integrated into it?

: --

--

---

From: [email-masked] (Chris D. Halverson)
Date: 14 Aug 1995 10:06:15 -0500

>>>>> "Robert" == Robert A Pickering <[email-masked]> writes:
In article <[email-masked]> [email-masked] (Robert A. Pickering Jr.) writes:

 Robert> Well, I mentioned this before, but I hope the integration
 Robert> isn't too seamless.

I have to agree here. I do want some sort of integration, but it _has_
to ask me my pass phrase to sign/decrypt/etc. messages. Like Robert
said, if it does it all automatically, why bother using it?

The key point here is integration, I don't want to have to rely on
using alternative-editors to use PGP. I want it to be a keystroke
(much like the ME versions of elm), but I do not want it taking any
actions automatically.

Just my thoughts on this...

Chris
-- 
Chris D. Halverson                |  Network Engineer
Minnesota Regional Network        |  Voice: (612) 342-2838
511 11th Avenue South, Box 212    |  Email: [email-masked]
Minneapolis, MN  55415            |  WWW:   http://www.MR.Net/~cdh/
    PGP signed/encrypted mail accepted, finger for PGP public key

---

From: [email-masked] (Kevin C. Dorff)
Date: Tue, 15 Aug 1995 22:01:13 GMT

How about you press a key and it asks for passphrase and THEN signs
the letter.

How about you read the message, notice it is encrypted and you ask it
to decrypt the message and it asks for passphrase and THEN decrypts
the letter. 

BUT, all of these should be options INSIDE the mailer.

Kevin

---

From: "J. Kelly Cunningham" <[email-masked]>
Date: Thu, 17 Aug 1995 09:34:51 -0600

-----BEGIN PGP SIGNED MESSAGE-----

On 14 Aug 1995, Chris D. Halverson wrote:

| 
| >>>>> "Robert" == Robert A Pickering <[email-masked]> writes:
| In article <[email-masked]> [email-masked] (Robert A. Pickering Jr.) writes:
| 
| 
|  Robert> Well, I mentioned this before, but I hope the integration
|  Robert> isn't too seamless.
| 
| I have to agree here. I do want some sort of integration, but it _has_
| to ask me my pass phrase to sign/decrypt/etc. messages. Like Robert
| said, if it does it all automatically, why bother using it?
| 

All Pine really needs is a pipe command (from the editor) and user
programmable "hot keys." Originally dedicated to nothing in particular (hint,
hint), the hot keys could be programmed to pipe the messages to PGP with the
proper options (by the end user).

| The key point here is integration, I don't want to have to rely on
| using alternative-editors to use PGP. I want it to be a keystroke
| (much like the ME versions of elm), but I do not want it taking any
| actions automatically.
| 

I dunno, when mkpgp is properly configured, it's not much more hassle than
ordinary Pine. @:o)

| Just my thoughts on this...
| 
| Chris
| -- 

-- kc    finger [email-masked] | pgp -fka    49860926614586AF
"The  strongest reason for the people to retain  their    54105BA338FBF0FB
right  to  keep  and  bear  arms is, as a last resort,
to protect themselves against tyranny in  government." -- Thomas Jefferson

---

From: [email-masked] (Christopher Wiles)
Date: 17 Aug 1995 22:08:15 GMT

-----BEGIN PGP SIGNED MESSAGE-----

> How about you press a key and it asks for passphrase and THEN signs

This is trivial to implement.  I've a patch (not ready for prime-time 
yet) that handles public- and private-key encryption, signing, and 
decryption in pico.

However, the way I'm doing it compromises one's passphrase in a 
multiuser environment (the passphrase will appear on a process list).  I 
need to spend an hour or so and find a good workaround for this.

> to decrypt the message and it asks for passphrase and THEN decrypts

This one is a little harder to implement -- I'm still working on it.

I can make this patch available to interested parties when I'm finished 
(probably by the end of this weekend).

- -- Chris ([email-masked]) PGP mail preferred -- Finger for PGP public key
  "This does not mean that all the practitioners of modern art or modern 
  politics are men who betrayed their own intelligence: most of them had 
  nothing to betray." -- Ayn Rand, "Altruism as Appeasement"

---

From: Nick Harrison <[email-masked]>
Date: Fri, 18 Aug 1995 09:53:40 -0400 (EDT)

Many people seem to be advocating using mkpgp until pgp is integrated 
into pine.   What is mkpgp and where can it be found?

Thanks

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
=  Emacs, more than an editor.		|	[email-masked]    =
=	Its a way of life		|				      =
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

---

From: "J. Kelly Cunningham" <[email-masked]>
Date: Fri, 18 Aug 1995 20:05:20 -0600

-----BEGIN PGP SIGNED MESSAGE-----

On Fri, 18 Aug 1995, Nick Harrison wrote:

| Date: Fri, 18 AUG 1995 09:53:40 -0400 (EDT) 
| From: Nick Harrison <[email-masked]>
| Newgroups: comp.mail.pine
| Subject: what is mkpgp 
| 
| Many people seem to be advocating using mkpgp until pgp is integrated 
| into pine.   What is mkpgp and where can it be found?
| 

mkpgp is a c-shell script which serves as a liaison for the Pine 
mailer/news reader and pgp.

It features: external editor of your choice, external spell checker of
your choice, encryption (with or without signing), signing (with or
without encryption), encrypted attachments selected via browser,
effortless public key additions from e-mail, decryption & signature
verification, effortless encrypted attachment extraction, and more... 

To get mkpgp, send blank e-mail to [email-masked] with

	Subject: mkpgp

A signed, ascii-armored message should show up in you mailbox within the 
hour.

Process the message with "pgp -p" to produce mkpgp.message.  Read 
mkpgp.message.

(You can add my keys with
              finger [email-masked] | pgp -fka
before you process the message if you want to check the signature.)

To receive updates, send blank e-mail to [email-masked] with
	Subject: addtomkpgplist
mkpgp will show up each time the modification date changes.

| Thanks
| 
| =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
| =  Emacs, more than an editor.		|	[email-masked]    =
| =	Its a way of life		|				      =
| =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
| 

You might prefer to run emacs as an alt-editor, and use MailCrypt:

Mailcrypt is an Emacs lisp package which provides a simple interface
to cryptographic functions with PGP.  It was written by Patrick
LoPresti ([email-masked]) and Jin Choi ([email-masked]).

The latest version of Mailcrypt is always (?) available through the
Mailcrypt home page at `http://cag-www.lcs.mit.edu/mailcrypt/'.  An
FTP mirror is at `ftp://cag.lcs.mit.edu/pub/patl/'.

To install the Mailcrypt package on your system, follow the directions
in the file `INSTALL'.

To hook Mailcrypt into your mail and news browsers, follow the
directions in the "Installation" section of the Mailcrypt manual.  If
you don't know how to use the Emacs Info browser, you should learn;
type `C-h i' and poke around.  You can read the Info version of the
Mailcrypt manual by doing `C-u C-h i' on the file `mailcrypt.info'.

Or read the HTML version of the manual which is directly accessible
from the Mailcrypt home page.

To automatically be informed of improvements to Mailcrypt, add
yourself to the (very low volume) Mailcrypt announcement list.  Send
Email to [email-masked] with a request to be
added.

Send all bug reports and comments to the authors.  And most of all,
enjoy!

 - Patrick LoPresti ([email-masked]) and Jin Choi ([email-masked])
   Thu Jun 22 19:58:35 1995