from lugh.tuatha.org (root@lugh.tuatha.org [194.125.145.45]) by
    dogma.slashnull.org (8.11.6/8.11.6) with ESMTP id g7MGJoZ14241 for
    <zzzz-ilug@example.com>; Thu, 22 Aug 2002 17:19:50 +0100

from localhost (localhost [127.0.0.1])
	by phobos.labs.netnoteinc.com (Postfix) with ESMTP id 69E2544174
	for <jm@localhost>; Mon, 12 Aug 2002 05:57:08 -0400 (EDT)
from phobos [127.0.0.1]
	by localhost with IMAP (fetchmail-5.9.0)
	for jm@localhost (single-drop); Mon, 12 Aug 2002 10:57:08 +0100 (IST)
from xent.com ([64.161.22.236]) by dogma.slashnull.org
    (8.11.6/8.11.6) with ESMTP id g7BGFhb06281 for <jm@jmason.org>;
    Sun, 11 Aug 2002 17:15:43 +0100
from lair.xent.com (localhost [127.0.0.1]) by xent.com (Postfix)
    with ESMTP id C9109294177; Sun, 11 Aug 2002 09:12:05 -0700 (PDT)
from venus.phpwebhosting.com (venus.phpwebhosting.com
    [64.29.16.27]) by xent.com (Postfix) with SMTP id 67AA0294173 for
    <fork@xent.com>; Sun, 11 Aug 2002 09:11:54 -0700 (PDT)
from unknown (HELO hydrogen.leitl.org) (62.155.144.56) by
    venus.phpwebhosting.com with SMTP; 11 Aug 2002 16:12:56 -0000
from localhost (eugen@localhost) by hydrogen.leitl.org
    (8.11.6/8.11.6) with ESMTP id g7BGCqh32418; Sun, 11 Aug 2002 18:12:52
    +0200
From fork-admin@xent.com  Mon Aug 12 11:10:08 2002

On Sun, 11 Aug 2002, Russell Turpin wrote:
> If you're using the mail client on your personal
> machine, there's no reason you would need to enter
> a passphrase, unless that is part of how you secure
> the data on your personal machine. You're private
The original comment's context was digital signatures. A digital signature
is worth sqrat if any userspace app or rogue superuser code can grab your
keyring in clear, and send out stuff in your name. A passphrase unlocking
the keyring for that particular use is a minimal protection (since not
immune to passphrase snarfers), but this is much, much better than always
leaving your key in the lock. (Why then having at all the key, in the
first place?)
> key is as secure as any other data on your machine.
> If you're working remotely, you already have to
> enter a passphrase to get to your email.
A passphrase is a (long, secure) password unlocking (decrypting) your
keyring. You don't use a passphrase to read your email. Unless it resides
on a crypto file system.
http://xent.com/mailman/listinfo/fork