From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/55753 Path: main.gmane.org!not-for-mail From: Ted Zlatanov Newsgroups: gmane.emacs.gnus.general Subject: Re: netrc.el now supports encoded files Date: Tue, 06 Jan 2004 17:56:14 -0500 Organization: =?koi8-r?q?=F4=C5=CF=C4=CF=D2=20=FA=CC=C1=D4=C1=CE=CF=D7?= @ Cienfuegos Sender: ding-owner@lists.math.uh.edu Message-ID: <4n1xqcznxt.fsf@collins.bwh.harvard.edu> References: <4n3caut1yy.fsf@collins.bwh.harvard.edu> <2268.217.208.174.213.1073395735.squirrel@217.208.174.213> <4n8ykkzw59.fsf@collins.bwh.harvard.edu> NNTP-Posting-Host: deer.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1073429865 18345 80.91.224.253 (6 Jan 2004 22:57:45 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Tue, 6 Jan 2004 22:57:45 +0000 (UTC) Original-X-From: ding-owner+M4293@lists.math.uh.edu Tue Jan 06 23:57:42 2004 Return-path: Original-Received: from malifon.math.uh.edu ([129.7.128.13]) by deer.gmane.org with esmtp (Exim 3.35 #1 (Debian)) id 1Ae08r-0004hP-00 for ; Tue, 06 Jan 2004 23:57:41 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by malifon.math.uh.edu with smtp (Exim 3.20 #1) id 1Ae08e-0001js-00; Tue, 06 Jan 2004 16:57:28 -0600 Original-Received: from justine.libertine.org ([66.139.78.221] ident=postfix) by malifon.math.uh.edu with esmtp (Exim 3.20 #1) id 1Ae08a-0001jn-00 for ding@lists.math.uh.edu; Tue, 06 Jan 2004 16:57:24 -0600 Original-Received: from clifford.bwh.harvard.edu (clifford.bwh.harvard.edu [134.174.9.41]) by justine.libertine.org (Postfix) with ESMTP id 7D2A83A0026 for ; Tue, 6 Jan 2004 16:57:23 -0600 (CST) Original-Received: from collins.bwh.harvard.edu (collins [134.174.9.80]) by clifford.bwh.harvard.edu (8.10.2+Sun/8.11.0) with ESMTP id i06MuI726519 for ; Tue, 6 Jan 2004 17:56:18 -0500 (EST) Original-Received: from collins.bwh.harvard.edu (localhost [127.0.0.1]) by collins.bwh.harvard.edu (8.12.9+Sun/8.11.0) with ESMTP id i06MuEuB021263 for ; Tue, 6 Jan 2004 17:56:14 -0500 (EST) Original-Received: (from tzz@localhost) by collins.bwh.harvard.edu (8.12.9+Sun/8.12.9/Submit) id i06MuEll021260; Tue, 6 Jan 2004 17:56:14 -0500 (EST) Original-To: "Ding Mailing List" X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6;d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Followup-To: "Ding Mailing List" In-Reply-To: (Simon Josefsson's message of "Tue, 06 Jan 2004 23:24:48 +0100") User-Agent: Gnus/5.110002 (No Gnus v0.2) Emacs/21.3.50 (usg-unix-v) Precedence: bulk Xref: main.gmane.org gmane.emacs.gnus.general:55753 X-Report-Spam: http://spam.gmane.org/gmane.emacs.gnus.general:55753 On Tue, 06 Jan 2004, jas@extundo.com wrote: > On second thought, my examples are somewhat flawed. But I hope my > main point, that home-grown file encryption schemes are not as good > as using something standard, like OpenPGP, still stands. Even when > the home-grown encryption is vetted by an OpenSSL command line > interface. I understand your concern that we don't consider home-grown encryption to be secure. I want to provide something better than plain-text passwords in the ~/.authinfo file for the average user. The examples you give are true, but as long as a casual attacker can't read the ~/.authinfo passwords, we've already made a big step in the right direction. Ted