From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/55758 Path: main.gmane.org!not-for-mail From: Simon Josefsson Newsgroups: gmane.emacs.gnus.general Subject: Re: netrc.el now supports encoded files Date: Wed, 07 Jan 2004 00:25:28 +0100 Sender: ding-owner@lists.math.uh.edu Message-ID: References: <4n3caut1yy.fsf@collins.bwh.harvard.edu> <4nptdx99g3.fsf@collins.bwh.harvard.edu> <4nwu84y967.fsf@collins.bwh.harvard.edu> NNTP-Posting-Host: deer.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1073431562 22097 80.91.224.253 (6 Jan 2004 23:26:02 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Tue, 6 Jan 2004 23:26:02 +0000 (UTC) Cc: ding@gnus.org Original-X-From: ding-owner+M4298@lists.math.uh.edu Wed Jan 07 00:25:58 2004 Return-path: Original-Received: from malifon.math.uh.edu ([129.7.128.13]) by deer.gmane.org with esmtp (Exim 3.35 #1 (Debian)) id 1Ae0aE-0006iT-00 for ; Wed, 07 Jan 2004 00:25:58 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by malifon.math.uh.edu with smtp (Exim 3.20 #1) id 1Ae0a0-0002E0-00; Tue, 06 Jan 2004 17:25:44 -0600 Original-Received: from justine.libertine.org ([66.139.78.221] ident=postfix) by malifon.math.uh.edu with esmtp (Exim 3.20 #1) id 1Ae0Zv-0002Dv-00 for ding@lists.math.uh.edu; Tue, 06 Jan 2004 17:25:39 -0600 Original-Received: from yxa.extundo.com (178.230.13.217.in-addr.dgcsystems.net [217.13.230.178]) by justine.libertine.org (Postfix) with ESMTP id 291723A0026 for ; Tue, 6 Jan 2004 17:25:38 -0600 (CST) Original-Received: from latte.josefsson.org (yxa.extundo.com [217.13.230.178]) (authenticated bits=0) by yxa.extundo.com (8.12.10/8.12.10) with ESMTP id i06NPVAU029236 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO); Wed, 7 Jan 2004 00:25:31 +0100 Original-To: Chris Green Mail-Copies-To: nobody X-Hashcash: 0:040106:cmg@dok.org:c3785d3ea15c3115 X-Hashcash: 0:040106:ding@gnus.org:395155846f608340 In-Reply-To: <4nwu84y967.fsf@collins.bwh.harvard.edu> (Ted Zlatanov's message of "Tue, 06 Jan 2004 18:00:32 -0500") User-Agent: Gnus/5.110002 (No Gnus v0.2) Emacs/21.3.50 (gnu/linux) Precedence: bulk Xref: main.gmane.org gmane.emacs.gnus.general:55758 X-Report-Spam: http://spam.gmane.org/gmane.emacs.gnus.general:55758 Ted Zlatanov writes: > On Tue, 06 Jan 2004, cmg@dok.org wrote: > >> Ted Zlatanov writes: >> >>> >>> Yes, I can add it too if you need it. What would be really nice is >>> a built-in ELisp cipher, for Windows users for example. A simple >>> XOR or ROT-13 based cipher would not be hard - does anyone want >>> those or should I (or someone else) implement a more complex one? >> >> base64-encode-{region,string} is what mozilla uses by default if you >> don't use the passphrase stuff. >> >> That's a plus for those times when you can open up >> .mozilla/user/*/\d+.s and actually get your passwords back out of >> silly webforms :> > > Would it be good to provide security that's very easily broken? > Simon's rijndael.el seems much better - but I'll implement something > that's easily reversed if you or someone else actually want it. Perhaps several levels are useful. But none of this is enabled by default, is it? I mean, users have to request encryption of .authinfo for it to happen, right? But I'm not sure I see the advantage of b64 over plain-text. Anyway, it sounds more and more like this could be a separate package. "encrypt.el" is available, AFAICT. Using various hooks, such a package might be able to work without the cooperation of Gnus at all. Then you could request automatic encryption/decrypt of ~/.newsrc.eld by saying (add-to-list 'encrypt-file-alist '("~/.newsrc.eld." gpg-symmetric)) or something like that. But that sounds like work, so simply adding gpg support to netrc.el might be sufficient.