Fixed.

[elisp/epg.git] / README

diff --git a/README b/README
index a8fda71..9fdf6d7 100644 (file)
--- a/README
+++ b/README
@@ -34,13 +34,15 @@ you can do some cryptographic operations on dired.
 
 * Security consideration
 
+There are security pitfalls around Emacs.
+
 ** Passphrase may leak to a temporary file.
 
 `call-process-region' writes data in region to a temporary file.
 The EasyPG Library does not use `call-process-region' to communicate with a gpg
 subprocess.
 
-** There is no way to clear passphrase safely.
+** Passphrase may be stolen from a core file.
 
 If Emacs crashes and dumps core, Lisp strings in memory are also
 dumped within the core file.  `read-passwd' function clears passphrase