Re: authinfo encryption through netrc.el works now

["Ted Zlatanov" <tzz@lifelogs.com>]

On Wed, 04 Aug 2004, jas@extundo.com wrote:

> The point of separating reading the password and caching it, was that
> code using password.el would typically look like:
> 
> 1. Read password.
> 2. Try to authenticate against server, invoke GPG using the password, etc.
> 3. If authentication failed, goto 1.
> 4. Cache the password.
> 
> If the password is cached directly, and if the user type the wrong
> password, that logic wouldn't work, and it would infloop steps 1, 2,
> and 3.
> 
> I realize that perhaps a better logic would be:
> 
> 1. Read and cache password.
> 2. Try to authenticate against server, invoke GPG using the password, etc.
> 3. If authentication failed, clear password, and goto 1.
> 
> And if the gnus-encrypt/netrc stuff use this logic, then fine, and
> ignore this message.

It doesn't, thanks for catching this potentially annoying bug.  I'll
work on fixing it - unfortunately there's no easy way right now in
gnus-encrypt to catch all the failure modes when decrypting so that's
where I will concentrate.

Another thing I'll do is to use the cipher + the file name as
password key.  Right now all the GPG+AES encrypted files will be
forced to use the same password.

Thanks!
Ted