Comment 1 for bug 54468

Revision history for this message
John A Meinel (jameinel) wrote :

This plugin:
http://bzr.arbash-meinel.com/plugins/gpg_uses_tempfile/

Uses a temporary chmod directory, followed by a temporary chmod file, to prevent tampering. And spawns 'gpg --clearsign' on the file.

Implemented as a plugin, because it is not as safe as using pipes. But is a reasonable workaround.