From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/55746 Path: main.gmane.org!not-for-mail From: "Steven E. Harris" Newsgroups: gmane.emacs.gnus.general Subject: Re: netrc.el now supports encoded files Date: Tue, 06 Jan 2004 12:59:02 -0800 Organization: SEH Labs Sender: ding-owner@lists.math.uh.edu Message-ID: References: <4n3caut1yy.fsf@collins.bwh.harvard.edu> <2268.217.208.174.213.1073395735.squirrel@217.208.174.213> <4n8ykkzw59.fsf@collins.bwh.harvard.edu> NNTP-Posting-Host: deer.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1073423750 13623 80.91.224.253 (6 Jan 2004 21:15:50 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Tue, 6 Jan 2004 21:15:50 +0000 (UTC) Cc: "Ding Mailing List" Original-X-From: ding-owner+M4286@lists.math.uh.edu Tue Jan 06 22:15:41 2004 Return-path: Original-Received: from malifon.math.uh.edu ([129.7.128.13]) by deer.gmane.org with esmtp (Exim 3.35 #1 (Debian)) id 1AdyY9-0005aY-00 for ; Tue, 06 Jan 2004 22:15:41 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by malifon.math.uh.edu with smtp (Exim 3.20 #1) id 1AdyXX-0000xc-00; Tue, 06 Jan 2004 15:15:03 -0600 Original-Received: from justine.libertine.org ([66.139.78.221] ident=postfix) by malifon.math.uh.edu with esmtp (Exim 3.20 #1) id 1AdyXS-0000xX-00 for ding@lists.math.uh.edu; Tue, 06 Jan 2004 15:14:58 -0600 Original-Received: from lax-gate4.raytheon.com (lax-gate4.raytheon.com [199.46.200.233]) by justine.libertine.org (Postfix) with ESMTP id 141843A0026 for ; Tue, 6 Jan 2004 15:14:58 -0600 (CST) Original-Received: from ds02w00.directory.ray.com (ds02w00.directory.ray.com [147.25.146.118]) by lax-gate4.raytheon.com (8.12.10/8.12.10) with ESMTP id i06LEmUh016105; Tue, 6 Jan 2004 13:14:52 -0800 (PST) Original-Received: from ds02w00.directory.ray.com (localhost [127.0.0.1]) by ds02w00.directory.ray.com (8.12.10/8.12.1) with ESMTP id i06LEi5i023742; Tue, 6 Jan 2004 21:14:45 GMT Original-Received: Received: from L75001820.sdo.us.ray.com ([192.27.58.82]) by ds02w00.directory.ray.com (8.12.10/8.12.9) with ESMTP id i06LEgkt023697 sender seh@panix.com; Tue, 6 Jan 2004 21:14:42 GMT Original-Received: from sharr by L75001820.sdo.us.ray.com with local (Exim 4.24) id HR36AF-0002Q8-ID; Tue, 06 Jan 2004 12:59:03 -0800 Original-To: Simon Josefsson Mail-Followup-To: Simon Josefsson , "Ding Mailing List" In-Reply-To: (Simon Josefsson's message of "Tue, 06 Jan 2004 21:24:28 +0100") User-Agent: Gnus/5.1003 (Gnus v5.10.3) XEmacs/21.4 (Rational FORTRAN, cygwin32) Precedence: bulk Xref: main.gmane.org gmane.emacs.gnus.general:55746 X-Report-Spam: http://spam.gmane.org/gmane.emacs.gnus.general:55746 Simon Josefsson writes: > I'm not sure the current netrc.el approach should be advertised as > secure, there is more to file encryption than using some block > cipher in CBC mode, and deriving the key and iv from a password. It > is more like obfuscation. OTOH, obfuscation is what people seem to > want. Now I'm confused. If encrypting the file with a symmetric cipher doesn't count as "secure," what more would it take to make this system secure? What's the difference between obfuscation and security in this case? -- Steven E. Harris