Dear Maintainer,

When entering a passphrase to pinentry-curses, the length is indicated
using asterisks. Even though typing a passphrase in the presence of
other people is a bad idea in general, this length indication makes it
worse. I set the severity of this issue is "normal", because it is a
regression from gnupg version 1.x.

On a related note, I figured that pinentry-curses would also no longer
accept Ctrl-u to clear the currently entered password. This also appears
to be a regression from gnupg version 1.x.

As a bare minimum, the behaviour of showing the password length should
be optional.

Helmut

Version: 1.1.1-1

The issue was forwarded upstream to https://dev.gnupg.org/T3428 with the
comment
| One convention i've seen in a few places is that if the first key
| pressed is a backspace, passphrase entry stops echoingn masking
| characters (perhaps replaced with a [no echo] field instead of *.
|
| that way, users who don't like having ******* reveal that their
| password is only 7 characters long can just hit backspace first.

This was implemented in 1.1.1
  * Disable echoing in backspace key if pressed first
    (GTK, Qt, TQt, and ncurses pinentries).

cu Andreas