Re: Password protection

[Ted Zlatanov <tzz@lifelogs.com>]

On Thu, 30 Sep 2010 05:32:53 +0200 Michael Albinus <michael.albinus@gmx.de> wrote: 

MA> Ted Zlatanov <tzz@lifelogs.com> writes:
LMI> Doesn't the Secrets API return a password back to Emacs Lisp land?
>>>> 
>>>> Yes, because `secrets-get-secret' is an ELisp function.  But we can have
>>>> `secrets-send-secret-to-process' and
>> 
MA> You mean calling Fdbus_call_method on C level?
>> 
>> I think Lars wants it to be more specific to passwords, not a general
>> D-Bus call.  But yes, it would eventually call out to that function.

MA> Hmm. Just a rough idea: what a about a new lisp object "password"? It
MA> can be created only via an (interactive) C-level function, and another
MA> C-level function returns the carried string. On lisp level, the value
MA> is available only as hash string of the password itself. By this,
MA> functions like `eq' or `string-equal' could still be applied.

MA> C-level functions, visible in lisp (like `process-send-string' or
MA> `dbus-call-method'), could be tought to accept a password *or* a string
MA> as parameter.

So only a process or C code can see or set the real value of a secret
token?  That seems like a great idea.

Ted