** CVS version of Gnus
-CVS version of Gnus supports EasyPG natively, simply put the following
-line into your ~/.emacs.
+CVS version of Gnus supports EasyPG natively. To use, simply put the
+following line into your ~/.emacs.
(setq mml2015-use 'epg)
mml2015-passphrase-cache-expiry
mml2015-verbose
-NOTE: You need not to install pgg-epg.el in this case.
+NOTE: You don't need pgg-epg.el in this case.
** PGG based MUA
-PGG is somewhat outdated PGP library used by old Gnus, MH-E, etc.
+PGG is outdated PGP library used by old Gnus (< v5.11), MH-E, etc.
-There is a PGG backend using EasyPG called pgg-epg.el. However,
-EasyPG API is a superset of PGG, so pgg-epg.el just emulates the old
-behavior of pgg.el. Major features which PGG lacks are
+There is a PGG backend written EasyPG called pgg-epg.el. However,
+EasyPG API is a superset of PGG and pgg-epg.el provides nothing but
+compatibility with PGG.
-- Key selection user interface
-- Diagnosis interface to the verify operation
-- Web of trust
-- S/MIME using gpgsm
+Major limitations of PGG
+
+- PGG doesn't have a user interface to select keys for typical
+ cryptographic operations
+- PGG doesn't handle messages signed with multiple keys correctly
+- PGG doesn't handle binary OpenPGP messages
+- PGG always trusts keys for encryption
+- PGG only supports OpenPGP. EasyPG supports S/MIME as well.
** SEMI based MUA
* Security
-There are security pitfalls around Emacs.
+There are security pitfalls around Emacs. EasyPG is written with
+avoiding them.
** Passphrase may leak to a temporary file.