summaryrefslogtreecommitdiff
path: root/etc/NEWS.26
diff options
context:
space:
mode:
Diffstat (limited to 'etc/NEWS.26')
-rw-r--r--etc/NEWS.2611
1 files changed, 10 insertions, 1 deletions
diff --git a/etc/NEWS.26 b/etc/NEWS.26
index 692c28a7210..55385f59a80 100644
--- a/etc/NEWS.26
+++ b/etc/NEWS.26
@@ -1,6 +1,6 @@
GNU Emacs NEWS -- history of user-visible changes.
-Copyright (C) 2016-2017 Free Software Foundation, Inc.
+Copyright (C) 2016-2018 Free Software Foundation, Inc.
See the end of the file for license conditions.
Please send Emacs bug reports to bug-gnu-emacs@gnu.org.
@@ -1502,6 +1502,15 @@ supported by the upstream project.
To adapt to the change, you may need to set 'epa-pinentry-mode' to the
symbol 'loopback'.
+Note that previously, it was said that passphrase input through
+minibuffer would be much less secure than other graphical pinentry
+programs. However, these days the difference is insignificant: the
+'read-password' function sufficiently protects input from leakage to
+message logs. Emacs still doesn't use secure memory to protect
+passphrases, but it was also removed from other pinentry programs as
+the attack is unrealistic on modern computer systems which don't
+utilize swap memory usually.
+
* Lisp Changes in Emacs 26.1