Re: using gpg protected files to read passwords

Lugubris <[email protected]>
Newsgroups gmane.mail.getmail.user
Message-ID <[email protected]>
Charles Cazabon @ 2019-09-06 16:31 UTC:

> Lugubris <[email protected]> wrote:
>>
>> I know about gnome keyring's integration, will there be an option for using
>> gpg protected files to read passwords? pass.gpg will have the saved password
>> and getmail will read it from that file.
>
> getmail can get the password from any arbitrary external command; see the
> password_command parameter.  Just write a shellscript that will produce the
> password from the gpg file for getmail to read.
>
> Note you can't interact with that process (i.e. see its output or provide
> keyboard input to it), as it's run as a separate process behind the scenes.

oh! my bad, I didn't read the docs and assummed this feature was not
present (not mentioned in archwiki). I wrote a script to retrive my
passwords from pass command [0]. Is it secure though? (pass command
outputs password to termial when run so does it leave the password
somewhere when using it with getmail?)

[0] -> https://ttm.sh/ah.txt

--
                                Lugubris
signature.asc (application/pgp-signature, 832 B)
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEKtJhKq+Ro0vwnvsEDrECK9YkDXoFAl1yltwACgkQDrECK9Yk
DXrSgxAAqjs+Ee5w1n8+mcaOXGSi5agk9ymfT+DV4H3ykeunjOiL57/F1lvpOHaq
0h2l6SLwdiAnMLHC5obSmIXIEiQ1+gVl/MiMfE+4JDbfj7tZBEDLY4bcbK+F1Zjo
CjwhRGxTxVutDya2zrsy9yYItnlX4BMzPK7AY/an/b2GZEjEPkqq1vRlpd9meV4q
gHAstumvlZnAE4l6lSJ23XOfMeM3OipECuw8wF0/JztaXAwjrnw1jVvHpTrqq+cO
2aetlDEeDusEvOVvPFbF5V5hGj3v2hfljOVi8OErcjWAxrDqbVcYc+Q6H05CEWbl
jAbEYfvE83P23rOKuqLZ/La2wmeVFOO2tlmfItCKRHDRHxRrAn/CJj4lzjCcRvDT
Tlohx6Mc01kOFkour+LzY2FEMhJhjd1p3GJNM41ItIqxGqCc7RVeT+6jdCg2ny57
beZRceVHF2TPYugUU4VR5KRSE4M26LGhCBIMxlAAj/X+Fr7Dyp7W7edZlwGzQ2Y4
B+aZ+r6TqkKTHPpGIkWxjCgM2immVdS2sL4ktxl4owGXxkXMQquo+v2fR5uR/C7S
2heYN+im0I2B7i/7jYPyhvmtEEFnG5dOQxWFVZya2loQEQr6XzmaF/zhVmmqCmpF
bxOmfADxt/Rr1hCqOuNJnCWmBXwaqsdt5t+KuDMs6mgpidI8xaE=
=e7Mg
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.