Re: [Duplicity-talk] Why is duplicity asking for decryption passphrase on --encrypt-sign-key?

[edgar . soldin]

On 7/28/2017 19:56, Ian Kelling via Duplicity-talk wrote:
> When I use --encrypt-sign-key, it prompts:
> "GnuPG passphrase for decryption:"
> 
> Encrypting with a public key does not use a pass, and just --encrypt-key
> does not ask this, so whats going on?
> 
> I'm assuming the passphrase is discarded but I want to make sure that's
> the case.
> 
> I'm using 0.7.12-1 from debian.

hey Ian,

signing uses your private key
  https://www.gnupg.org/gph/en/manual/x135.html

hence the question for your passphrase.

you can easily circumvent it by using a machine key pair and just add your 
personal public key as additional encryption key.

..ede