Just a question to the devs who make password wallets etc using GPG: Why do you tell the user, they got only 3 attempts at entering their private key's password?
They don't. They have infinite attempts because they own the key file. I've seen this in #KDE and #Gnome now.
#Software #GPG #KWallet
@cweickhmann If users use physical token for GPG keys such as #gnuk token (or anything similar implementing #openpgpcard standard) then they really have only 3 attempts. After 3 wrong attempts token is semi locked and needs Admin PIN to unlock. After 3 wrong admin PIN attempts private key is erased.