aboutsummaryrefslogtreecommitdiffstats
path: root/lang/python/docs/dita/howto/part02/python-gnupg.dita
diff options
context:
space:
mode:
Diffstat (limited to 'lang/python/docs/dita/howto/part02/python-gnupg.dita')
-rw-r--r--lang/python/docs/dita/howto/part02/python-gnupg.dita22
1 files changed, 22 insertions, 0 deletions
diff --git a/lang/python/docs/dita/howto/part02/python-gnupg.dita b/lang/python/docs/dita/howto/part02/python-gnupg.dita
new file mode 100644
index 00000000..f083a7a6
--- /dev/null
+++ b/lang/python/docs/dita/howto/part02/python-gnupg.dita
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE dita PUBLIC "-//OASIS//DTD DITA Composite//EN" "ditabase.dtd">
+<dita>
+ <topic id="topic_llw_kzx_5db">
+ <title>The python-gnupg package maintained by Vinay Sajip</title>
+ <body>
+ <p>This is arguably the most popular means of integrating GPG with Python. The package
+ utilises the <codeph>subprocess</codeph> module to implement wrappers for the
+ <cmdname>gpg</cmdname> and <cmdname>gpg2</cmdname> executables normally invoked on the command
+ line (<cmdname>gpg.exe</cmdname> and <cmdname>gpg2.exe</cmdname> on Windows).</p>
+ <p>The popularity of this package stemmed from its ease of use and capability in providing the
+ most commonly required features.</p>
+ <p>Unfortunately it has been beset by a number of security issues in the past; most of which
+ stemmed from using unsafe methods of accessing the command line via the
+ <codeph>subprocess</codeph> calls. While some effort has been made over the last two to
+ three years (as of 2018) to mitigate this, particularly by no longer providing shell access
+ through those subprocess calls, the wrapper is still somewhat limited in the scope of its
+ GnuPG features coverage.</p>
+ <p>The python-gnupg package is available under the MIT license.</p>
+ </body>
+ </topic>
+</dita>