[14014] in Cypherpunks
Re: "Email-Firewalls" / Instant Corporate PGP
daemon@ATHENA.MIT.EDU (Hal)
Sun May 22 01:35:28 1994
Date: Sat, 21 May 1994 22:27:20 -0700
From: Hal <hfinney@shell.portal.com>
To: cypherpunks@toad.com
From: Vincent.Cate@FURMINT.NECTAR.CS.CMU.EDU
> #!/bin/csh -f
> #
> # Vince Cate
>
> setenv PGPPATH /usr/vac/pgp
> setenv PGPPASS "not really vinces passphrase"
>
> cd $PGPPATH
>
> cat > mailtmp.asc
>
> egrep 'Date:|From:|Subject:|To:' mailtmp.asc > mailtmp
> echo " " >> mailtmp
>
> pgp -f < mailtmp.asc >> mailtmp
>
> /usr/ucb/mail -s "Was encrypted" vac < mailtmp
>
> exit 0
A more secure way is not to setenv PGPPASS but rather:
setenv PGPPASSFD 1
and then
(echo "vinces passphrase" ; cat mailtmp.asc) | pgp -f >> mailtmp
The PGPPASSFD means take the passphrase from file descriptor 1, which is
the standard input. This way it never appears in the environment of a
process. Many unix systems have a switch to ps to show all processes'
environments.
Hal
