[9fans] plain passwords and keyfs

[Enrique Soriano Salvador <esoriano@lsub.org>]

Why does keyfs serve the users password in plain text on the file
/mnt/keys/user/secret ?

I know that the man in front of the
cpu/auth server is the only one that can see the users passwords...  but
it can be dangerous for users that have the same
password for different systems (unix,
win, plan9 ...)

{ I am changing my Unix passwords
in this very moment, so nemo and gorka can now see my password-for-all
in plain text!!! :) }

As far as I know, in other systems (i.e. unix) the admin cannot  see the
users passwords (of course, he can try to crack the /etc/shadow file or
to make other malicious acts)

I am sure that there is a design related
explanation for that...

Thanks!

Q.