Subject: PGP & Pine -- another solution?

From: Anthony Towns <[email-masked]>
Date: Wed, 9 Oct 1996 18:04:16 +1000

-----BEGIN PGP SIGNED MESSAGE-----

Hi All,

I've seen a few messages about Pine and PGP integration on this newsgroup,
and most of the solutions proferred suggest using a short shell script as
a filter or an alternate editor.

That seems somewhat of a pain to me: you either have to include your
passphrase in the script, or as an environment variable, or you have to
retype it all the time.

I've got a slightly different solution, which uses Richard Gooch's
PGPsendmail package (which is a Unix only thing, AFAIK). pgpsendmail
includes a program called pgpdaemon which sets up some named pipes and,
after you've sent it your passphrase, signs, and decrypts mail for you.

I've written some extra programs (to go with Mr Gooch's pgppipe which
decrypts mail), namely pgpsign (which clearsigns stdin to stdout) and
pgpencrypt (which encrypts and signs stdin to stdout).

With some fairly trivial filters, pine and pgp fit together transparently.
Encrypted messages get automagically decrypted, signed messages get a
validity segment stuck on the bottom, and any mail I send gets
automatically signed or encrypted.

It's a somewhat more complicated solution and it does have some minor
risks associated with it but I find that it works really well.

Cheers,
aj

- --
Anthony Towns                      |  #include <disclaimer.h>
[email-masked]                   |  PGP Key: 0x7172DAED
http://student.uq.edu.au/~s343676  |  Life is not a matroid.

---

From: Dean Pentcheff <[email-masked]>
Date: 10 Oct 1996 05:11:42 -0400

Anthony Towns <[email-masked]> writes:
...
> pgpencrypt (which encrypts and signs stdin to stdout).

Hmmmm... I was considering writing something similar myself (getting
awfully tired of retyping my passphrase for every single outgoing
email, and not thrilled about that passphrase going unencrypted across
our network here).  But if you've done the work, I'd be delighted to
parasitize it.  

Care to post the code, or a pointer to it?  

Thanks!

-Dean
-- 
N. Dean Pentcheff   <[email-masked]>   WWW: http://tbone.biol.sc.edu/~dean/
Biological Sciences, Univ. of South Carolina, Columbia SC 29208 (803-777-3936)
PGP ID=768/22A1A015 Keyprint=2D 53 87 53 72 4A F2 83  A0 BF CB C0 D1 0E 76 C0 
Get PGP keys and information with the command: "finger [email-masked]"

---

From: Anthony Towns <[email-masked]>
Date: Fri, 11 Oct 1996 21:38:50 +1000

-----BEGIN PGP SIGNED MESSAGE-----

On 10 Oct 1996, Dean Pentcheff wrote:
> > PGPsendmail package (which is a Unix only thing, AFAIK). [...] 

I've tidied it up a little, so it should be close to usable for others 
now.

If you've got web access, point your browser at:
	http://student.uq.edu.au/~s343676/pgpdaemon

A warning, though: it's beta software, and I didn't take _that_ much
care to make sure it's robust, reliable, or secure. It *should* be,
but no promises.

If you don't have web access (really? Wow. I *am* impressed), mail me,  
and we'll work something out.

As was Richard Gooch's original, it's GPLed and hence freely 
redistributable. I'm not quite game to advertise it too widely yet,
though. :) 

Cheers,
aj

- --

---

From: Jason Englander <[email-masked]>
Date: Fri, 11 Oct 1996 10:32:54 -0500 (CDT)

-----BEGIN PGP SIGNED MESSAGE-----

> Care to post the code, or a pointer to it?  

You might want to take a look at mkpgp 2.1 also...  It's a csh script, and
if I remember correctly, the author included some sort of a daemon-type
script to pass along your passphrase to pgp.  I believe it's called pph and
it's in the archive's Ancillaries directory.  I'm not using it though (the
daemon), so sorry about the lack of detail.

ftp://ftp.rivertown.net/pub/unix/privacy/mkpgp2.1.tar.gz

  Jason

-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
E-mail      : [email-masked], @interl.net, @geocities.com
Web         : http://www.interl.net/~jasoneng/
Linux Links : http://nll.home.ml.org/
PGP Key     : send e-mail with subject: get-pgp-key
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Linux: because a PC is a terrible thing to waste

---

From: "Fred B. Ringel" <[email-masked]>
Date: Sat, 12 Oct 1996 02:22:55 GMT

-----BEGIN PGP SIGNED MESSAGE-----

> after you've sent it your passphrase, signs, and decrypts mail for you.
	The best solution I've seen is mkpgp. There is a link to it on my
PGP-Users Mailing List page (http://pgp.rivertown.net). Once you get this
going, you won't have to bother with pgpsendmail or filters or anything
else. Its Unix only. But have you seen another integration program that, if
it doesn't have a public key for someone will, at your option,
automatically invoke lynx and go to the keyserver to lookup the key and
offer to add it to your keyring? And of course, it free.

	Fred

/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
Fred B. Ringel				Rivertown.Net
Systems Administrator			P.O. Box 532
and General Fixer-upper			Hastings, New York 10706
Voice/Fax/Support: 914.478.2885		Data: 914-478-4988
				
Westchester's Rivertown's Full Service Flat-Rate Internet Access Provider 
				***AND***
	PGP-Users Mailing list maintainer--http://pgp.rivertown.net
	E-mail "SEND-PGPKEY" in the Subject for my Public Key
\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/