diff options
Diffstat (limited to 'lang/python/docs/dita/howto/part02/python-gnupg.dita')
-rw-r--r-- | lang/python/docs/dita/howto/part02/python-gnupg.dita | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/lang/python/docs/dita/howto/part02/python-gnupg.dita b/lang/python/docs/dita/howto/part02/python-gnupg.dita new file mode 100644 index 00000000..f083a7a6 --- /dev/null +++ b/lang/python/docs/dita/howto/part02/python-gnupg.dita @@ -0,0 +1,22 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!DOCTYPE dita PUBLIC "-//OASIS//DTD DITA Composite//EN" "ditabase.dtd"> +<dita> + <topic id="topic_llw_kzx_5db"> + <title>The python-gnupg package maintained by Vinay Sajip</title> + <body> + <p>This is arguably the most popular means of integrating GPG with Python. The package + utilises the <codeph>subprocess</codeph> module to implement wrappers for the + <cmdname>gpg</cmdname> and <cmdname>gpg2</cmdname> executables normally invoked on the command + line (<cmdname>gpg.exe</cmdname> and <cmdname>gpg2.exe</cmdname> on Windows).</p> + <p>The popularity of this package stemmed from its ease of use and capability in providing the + most commonly required features.</p> + <p>Unfortunately it has been beset by a number of security issues in the past; most of which + stemmed from using unsafe methods of accessing the command line via the + <codeph>subprocess</codeph> calls. While some effort has been made over the last two to + three years (as of 2018) to mitigate this, particularly by no longer providing shell access + through those subprocess calls, the wrapper is still somewhat limited in the scope of its + GnuPG features coverage.</p> + <p>The python-gnupg package is available under the MIT license.</p> + </body> + </topic> +</dita> |