Re: PGP and SMIME support

[Kazuhiro Ito <kzhr@d1.dion.ne.jp>]

Hi,

> > I use modified SEMI (*1) which use EasyPG and I use the below code for
> > automatic verification.
> > 
> > (*1) https://github.com/ikazuhiro/semi-epg
> 
> At present I also use this semi version.
> 
> I had to patch wanderlust:
> 
> --- source/wanderlust/wl/wl-mime.el	2010-10-18 22:57:20.840003215 +0200
> +++ .emacs.d/wanderlust/wl/wl-mime.el	2011-07-12 23:07:02.000000000 +0200
> @@ -489,7 +489,7 @@
>  
>  (eval-when-compile
>    ;; split eval-when-compile form for avoid error on `make compile-strict'
> -  (require 'mime-pgp)
> +  (require 'mime-epg)
>    (condition-case nil
>        (require 'epa)
>      (error
> 
> Any other modifications required?

I simply remove (require 'mime-pgp), because I have no error without
it.  And no additional modification may be required for SEMI-EPG.


> With gpg1 signing and encrypting is working, but I have to enter the
> passphrase twice.

If you set wl-draft-send-confirm-with-preview to non-nil, it is
expected behavior.  In that case, Wanderlust builds a message twice
(for previewing and sending) and passphrase is required twice.

FYI, the document of EasyPG says as below.

> The EasyPG Library dares to disable passphrase caching. Fortunately,
> there is more secure way to cache passphrases - use gpg-agent.


> With gpg2 (setq epg-gpg-program "/usr/bin/gpg2") signing and
> encrypting doesn't work. The passphrase is also requested twice but
> then I get an error.

AFAIK, EasyPG is not compatible with gpg2 (*1).

(*1) http://thread.gmane.org/gmane.emacs.devel/97165/focus=97235


> In Emacs 24 pgg has become obsolete. Should we switch to semi-epg
> sooner or later?

PGG is outdated.  But SEMI-EPG has some problems.

  1) It depends EasyPG, which does not support old platforms
  Wanderlust suports.
  2) It is not tested adequately, because it is made for my personal
  use but I rarely sign, decrypt or encrypt.
  3) I know little about signing, verification, encryption and
  decryption.
  4) I don't have much concern to maintain it.

I think EasyPG is better than PGG, but I don't know SEMI-EPG is better
than SEMI.

-- 
Kazuhiro Ito