Re: Cancel locks?

[Per Abrahamsen <abraham@dina.kvl.dk>]

Simon Josefsson <jas@extundo.com> writes:

> Customize auto-save it, initialized to something random [1]? But the user
> should then be informed about keeping .emacs read-protected in multi-user
> environments. Which is a can of worms that shouldn't be opened.  Sigh.

If it is auto-generated, keeping .emacs read only is not really that
important, as there currently are no real security with cancels.
Anyone can cancel messages from anybody.  If servers start honoring
cancel locks, it become more important, as keeping the password secret
will then buy you some extra security.

If it is given by the user, the danger is larger, as he might use the
same password for something important.

> [1] There isn't a good PRNG available in elisp... Hm.  Maybe a random
> number library would be nice.

Mostly we need some random data.  Probably the time and pid is enough
for this low impact use, in particular if the password is generated
when the user start Gnus the first time, and not when he post the
first time (in which case the time will be visible to an attacker in
the Date header).