Re: decryption outputs to stdout before verification
"Robert J. Hansen via Gnupg-users" <[email protected]>
| Newsgroups | gmane.comp.encryption.gpg.user |
|---|---|
| Message-ID | <[email protected]> |
> Note that the above user visible output (not the exit code) pretends to > report success, > which is likely to make direct or scripted human users accept the wrong > signature. This is the behavior at fault in the EFAIL paper of a few years ago. > --status-fd is a particularly horrible interface for shell scripting use, > as it requires setting up an additional temporary file and overly complex > parsing commands todistinguish different outcomes. Either use a better shell with support for the processing behavior you need, or else write your verifier in Perl or Python and do the stuff there. You could also probably do it in awk. _______________________________________________ Gnupg-users mailing list [email protected] https://lists.gnupg.org/mailman/listinfo/gnupg-users
OpenPGP_signature.asc
(application/pgp-signature, 236 B)
-----BEGIN PGP SIGNATURE----- wnsEABYIACMWIQR9jsS4W2/t1sENPHkeepTU6H+R1QUCaPu0NgUDAAAAAAAKCRAeepTU6H+R1R/T AP9Pk3QTxqKs+EwKg066RopMNPkhnBy/6yh6UgIVcQw7iQEAmlrHYpDecGbNL0w646IPYNXgNECK c7sNdoVGpzJrNAs= =slfW -----END PGP SIGNATURE-----