Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Consider the design on top of GNUPGHOME #73

Open
wdhongtw opened this issue Jul 9, 2024 · 0 comments
Open

Consider the design on top of GNUPGHOME #73

wdhongtw opened this issue Jul 9, 2024 · 0 comments

Comments

@wdhongtw
Copy link
Owner

wdhongtw commented Jul 9, 2024

According to the document from GPG tools, setting GNUPGHOME
can create a separated environment, e.g. socket file path between gpg and gpg-agent.

Currently, this extension communicated with the gpg-agent,
perform a dummy signing operation with pinentry-loopback to force gpg-agent to cache the passphrase.

With GNUPGHOME, it seems possible to do some MITM operation,
so we can prompt user to provide passphrase when it's actually asked by gpg-agent.

vscode -> git -> gpg -redirect by GNUPGHOME-> agent by our extension -> actual agent
                                                       v
                                           ask passphrase from user

Compare to current design, this mechanism need more initial setup and runtime process management.
But it would be a big improve if everything are done properly

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant