From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/72160 Path: news.gmane.org!not-for-mail From: Lars Magne Ingebrigtsen Newsgroups: gmane.emacs.gnus.general Subject: Re: Password protection Date: Wed, 29 Sep 2010 16:07:03 +0200 Organization: Programmerer Ingebrigtsen Message-ID: References: <87sk0t3oxm.fsf@lifelogs.com> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: dough.gmane.org 1285769370 15859 80.91.229.12 (29 Sep 2010 14:09:30 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Wed, 29 Sep 2010 14:09:30 +0000 (UTC) To: ding@gnus.org Original-X-From: ding-owner+M20533@lists.math.uh.edu Wed Sep 29 16:09:29 2010 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from util0.math.uh.edu ([129.7.128.18]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1P0xLc-0007ol-S0 for ding-account@gmane.org; Wed, 29 Sep 2010 16:09:29 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by util0.math.uh.edu with smtp (Exim 4.63) (envelope-from ) id 1P0xLF-0001Un-77; Wed, 29 Sep 2010 09:09:05 -0500 Original-Received: from mx2.math.uh.edu ([129.7.128.33]) by util0.math.uh.edu with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1P0xLD-0001UQ-4S for ding@lists.math.uh.edu; Wed, 29 Sep 2010 09:09:03 -0500 Original-Received: from quimby.gnus.org ([80.91.231.51]) by mx2.math.uh.edu with esmtp (Exim 4.72) (envelope-from ) id 1P0xL8-0005Cu-Cy for ding@lists.math.uh.edu; Wed, 29 Sep 2010 09:09:02 -0500 Original-Received: from lo.gmane.org ([80.91.229.12]) by quimby.gnus.org with esmtp (Exim 3.36 #1 (Debian)) id 1P0xL7-0001c7-00 for ; Wed, 29 Sep 2010 16:08:57 +0200 Original-Received: from list by lo.gmane.org with local (Exim 4.69) (envelope-from ) id 1P0xL6-0007dH-5D for ding@gnus.org; Wed, 29 Sep 2010 16:08:56 +0200 Original-Received: from cm-84.215.34.171.getinternet.no ([84.215.34.171]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 29 Sep 2010 16:08:56 +0200 Original-Received: from larsi by cm-84.215.34.171.getinternet.no with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 29 Sep 2010 16:08:56 +0200 X-Injected-Via-Gmane: http://gmane.org/ Mail-Followup-To: ding@gnus.org Original-Lines: 25 Original-X-Complaints-To: usenet@dough.gmane.org X-Gmane-NNTP-Posting-Host: cm-84.215.34.171.getinternet.no Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAALVBMVEW+uNFZKlcKBBb3+Pda O3SWFCtRHEr9/fzm6u97VYX////+//6Vgqr+/v3U1uQ3TYiLAAACKElEQVQ4jW3Uz2vaUBwA8MAQ qos7yNh9DwkMdih4cMhWVvcIE8oQxjsIYawigd0GPZRlOAQZE9vKNiKboCDk8OS5yI47CpqDw5XC Dh0Byy4FEfFv2DeNs++FfCEkeZ/34/v9BiIxmqGp2qHL1kFTqfLhgyqTGHPZedr4P87sVHo2O3jk wSb6rp2BJf4kDizpZrezeVvDsTw8scjz7osgRAjR4peFqibChVEhDtG2SZ4YPJxcximB0OBacDDI v9feNguwGyyLcfCNRMjXyBcHYOTw0IWJpNlxRudOjLoCeNGBybZ/tH0N7SiJLw26ql+XC/BGKzDq xA/mtS0BfjTzeUjtz3yrluEaJw2a5GcZHgbzNONDssipy0JCYh/ChoW2+0EbczcUBvLqRhj0G/Kt oRsC1t+pNK2HwbI9nS5CoBdt4XaMB9uvZjBR9/f4reyy34+u2TIfGxzQarXvQ84c8elajcZv735m YrzgoV+RV17ZMr69l+GBViZDg+3IJlZzYuXvxu0Mq4zVEi4JWbGejOuWvKvvYz0nFrjEi974jl7C 6isRzlrx7U860lW9JELPfBpVi0jJBsEat0w9gVBCCQCd4F2cRaiIkkJWcLqJP35GEEpMhItJWwLQ EfolgiWfvs4iBeCJCGzn6CFAEaFncKL4BZcJdBcOeRlYwewo1AFwH34KAvTGPtybBVZ8V9EVJN0A HK9BqQdgqXqF+xV6YG/gqiMKSgL8A/pAj8udmgsOAAAAAElFTkSuQmCC Mail-Copies-To: never X-Now-Playing: Japan's _Quiet Life_: "Quiet Life" User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/24.0.50 (gnu/linux) Cancel-Lock: sha1:104H9Q98AyZCOfWpovytTCprb+Y= X-Spam-Score: -1.9 (-) List-ID: Precedence: bulk Xref: news.gmane.org gmane.emacs.gnus.general:72160 Archived-At: Ted Zlatanov writes: > Look at it the other way: why shouldn't they set up a GPG agent or enter > a passphrase? (assuming that entering the passphrase more than once is > a bug I plan to fix) Entering a pass phrase (once) is fine if they've chosen to set things up like that. Firefox also allows the passwords to be, er, password-protected. :-) But setting up a GPG agent is way too much for a normal user. I think. > So I'd argue that Emacs has, practically speaking, better security > *externally* than Firefox, Chrome, or most other web browsers with a > authinfo.gpg file. Now from the inside, yes, it's a candy store of > passwords, and that's a concern. But Doing It Right requires a lot of > infrastructure that Emacs Lisp doesn't have. And Firefox and Chrome > extensions can get at your passwords too AFAIK. Yeah. A `process-send-password' function makes the candy somewhat less tasty, I think... -- (domestic pets only, the antidote for overdose, milk.) larsi@gnus.org * Lars Magne Ingebrigtsen