Skip to content
GitLab
Projects Groups Topics Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Register
  • Sign in
  • T tails
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributor statistics
    • Graph
    • Compare revisions
  • Issues 1,014
    • Issues 1,014
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 28
    • Merge requests 28
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • tails
  • tails
  • Issues
  • #11099
Closed
Open
Issue created Feb 09, 2016 by segfault@segfaultDeveloper

Decide which pinentry we want to ship

Originally created by @segfault on #11099 (Redmine)

We are currently shipping pinentry-gtk2 from Debian jessie.
There are multiple problems with it:

  • It causes the GNOME shell menus to become unresponsive (#11038 (closed))

  • It is not well integrated within GNOME (#9555 (closed))

  • It doesn’t allow pasting which makes it hardly usable with KeePassX, because it needs the autotype feature, which:

  • is unintuitive to use (in contrast to the copy/paste method, which every user knows how to use)

  • is buggy (#10940 (closed))

  • by default types the user name together with the passphrase, which won’t unlock the PGP key and keeps the user confused about what happened, because pinentry only displays dots instead of the characters typed

  • makes it much more likely to leak the password in general, as it types enter automatically after it types the password, so it automatically SENDS the password in IRC if you accidentally focussed the client before you use the autotype feature (this is not true in the case of the pinentry, because it grabs the keyboard - but I don’t think users should have to use the autotype at all)

Related issues

  • Related to #9555 (closed)
  • Related to #11038 (closed)
  • Related to #11239 (closed)
  • Related to #12733 (closed)
Edited Jul 10, 2020 by intrigeri
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking