From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/72148 Path: news.gmane.org!not-for-mail From: Daniel Pittman Newsgroups: gmane.emacs.gnus.general Subject: Re: Password protection Date: Wed, 29 Sep 2010 15:58:23 +1000 Message-ID: <87bp7hnla8.fsf@rimspace.net> References: <87mxr1nv0d.fsf@rimspace.net> <9wsk0t88pl.fsf@news.eternal-september.org> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Trace: dough.gmane.org 1285740128 16865 80.91.229.12 (29 Sep 2010 06:02:08 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Wed, 29 Sep 2010 06:02:08 +0000 (UTC) To: ding@gnus.org Original-X-From: ding-owner+M20521@lists.math.uh.edu Wed Sep 29 08:02:07 2010 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from util0.math.uh.edu ([129.7.128.18]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1P0pjy-0005Ne-N0 for ding-account@gmane.org; Wed, 29 Sep 2010 08:02:07 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by util0.math.uh.edu with smtp (Exim 4.63) (envelope-from ) id 1P0pj4-0007hN-2I; Wed, 29 Sep 2010 01:01:10 -0500 Original-Received: from mx1.math.uh.edu ([129.7.128.32]) by util0.math.uh.edu with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1P0piy-0007hD-Cx for ding@lists.math.uh.edu; Wed, 29 Sep 2010 01:01:04 -0500 Original-Received: from quimby.gnus.org ([80.91.231.51]) by mx1.math.uh.edu with esmtp (Exim 4.72) (envelope-from ) id 1P0pit-0007Fc-Jx for ding@lists.math.uh.edu; Wed, 29 Sep 2010 01:01:04 -0500 Original-Received: from lo.gmane.org ([80.91.229.12]) by quimby.gnus.org with esmtp (Exim 3.36 #1 (Debian)) id 1P0pis-00036Z-00 for ; Wed, 29 Sep 2010 08:00:58 +0200 Original-Received: from list by lo.gmane.org with local (Exim 4.69) (envelope-from ) id 1P0piq-00054N-5z for ding@gnus.org; Wed, 29 Sep 2010 08:00:56 +0200 Original-Received: from sdcarl02.strategicdata.com.au ([203.214.67.82]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 29 Sep 2010 08:00:56 +0200 Original-Received: from daniel by sdcarl02.strategicdata.com.au with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 29 Sep 2010 08:00:56 +0200 X-Injected-Via-Gmane: http://gmane.org/ Original-Lines: 31 Original-X-Complaints-To: usenet@dough.gmane.org X-Gmane-NNTP-Posting-Host: sdcarl02.strategicdata.com.au User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.2 (gnu/linux) Cancel-Lock: sha1:9RMf7zKDvGQ8IE0U9ECxdSBN+J8= X-Spam-Score: -1.9 (-) List-ID: Precedence: bulk Xref: news.gmane.org gmane.emacs.gnus.general:72148 Archived-At: Richard Riley writes: > Daniel Pittman writes: >> Lars Magne Ingebrigtsen writes: >> >>> I find it sort of puzzling that we have to jump through all these hoops >>> to get at credentials. I mean, Firefox users don't have to set up a gpg >>> agent or type their passwords a gazillion times, so why should users? >> >> I just shove mine into ~/.netrc, set appropriate permissions, and let the >> whole thing be. I did my risk assessment, encrypted my entire disk, and was >> satisfied that by the time someone could steal my password through there the >> could equally steal it behind the back of any encryption. >> >> So, yeah, I agree with you. > > Nice. But your case is a total fringe case so doesn't justify not using > a proper agent for gpg key retrieval. To argue that its unnecessary > because your entire disk is already encrypted is probably not a strong > case ;) You are right: the disk encryption is an attractive nuisance in my argument. By the time someone can bypass the security precautions of having a file owned by me, on my single user machine, they have already won plenty of other ways. Daniel ...besides, isn't using Gnus already a fringe activity? -- ✣ Daniel Pittman ✉ daniel@rimspace.net ☎ +61 401 155 707 ♽ made with 100 percent post-consumer electrons