From mboxrd@z Thu Jan  1 00:00:00 1970
X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/35004
Path: main.gmane.org!not-for-mail
From: Per Abrahamsen <abraham@dina.kvl.dk>
Newsgroups: gmane.emacs.gnus.general
Subject: Re: Cancel-Locks
Date: 26 Feb 2001 18:40:08 +0100
Organization: The Church of Emacs
Sender: owner-ding@hpc.uh.edu
Message-ID: <rjlmqtpclj.fsf@ssv2.dina.kvl.dk>
References: <20010223133030.B14991@mastaler.com>
	<rjwvae995c.fsf@ssv2.dina.kvl.dk> <ispug6iilb.fsf@elk.ps.uni-sb.de>
	<rjlmqtss5c.fsf_-_@ssv2.dina.kvl.dk> <87r90l90lg.fsf@deneb.enyo.de>
	<iluzof9v49u.fsf@barbar.josefsson.org> <87snl175us.fsf@deneb.enyo.de>
	<rjwvadpf5c.fsf_-_@ssv2.dina.kvl.dk> <87k86d73ze.fsf_-_@deneb.enyo.de>
NNTP-Posting-Host: coloc-standby.netfonds.no
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Trace: main.gmane.org 1035170819 686 80.91.224.250 (21 Oct 2002 03:26:59 GMT)
X-Complaints-To: usenet@main.gmane.org
NNTP-Posting-Date: Mon, 21 Oct 2002 03:26:59 +0000 (UTC)
Return-Path: <owner-ding@hpc.uh.edu>
Original-Received: from lisa.math.uh.edu (lisa.math.uh.edu [129.7.128.49])
	by mailhost.sclp.com (Postfix) with ESMTP id 07165D049D
	for <jason@mastaler.com>; Mon, 26 Feb 2001 12:40:45 -0500 (EST)
Original-Received: from sina.hpc.uh.edu (lists@Sina.HPC.UH.EDU [129.7.3.5])
	by lisa.math.uh.edu (8.9.1/8.9.1) with ESMTP id LAB14044;
	Mon, 26 Feb 2001 11:40:31 -0600 (CST)
Original-Received: by sina.hpc.uh.edu (TLB v0.09a (1.20 tibbs 1996/10/09 22:03:07)); Mon, 26 Feb 2001 11:39:52 -0600 (CST)
Original-Received: from mailhost.sclp.com (postfix@66-209.196.61.interliant.com [209.196.61.66] (may be forged))
	by sina.hpc.uh.edu (8.9.3/8.9.3) with ESMTP id LAA04974
	for <ding@hpc.uh.edu>; Mon, 26 Feb 2001 11:39:41 -0600 (CST)
Original-Received: from sheridan.dina.kvl.dk (sheridan.dina.kvl.dk [130.225.40.227])
	by mailhost.sclp.com (Postfix) with ESMTP id 3B123D049D
	for <ding@gnus.org>; Mon, 26 Feb 2001 12:40:10 -0500 (EST)
Original-Received: from ssv2.dina.kvl.dk (ssv2.dina.kvl.dk [130.225.40.226])
	by sheridan.dina.kvl.dk (8.9.3/8.9.3/Debian 8.9.3-21) with ESMTP id SAA07810;
	Mon, 26 Feb 2001 18:40:08 +0100
Original-Received: from abraham by ssv2.dina.kvl.dk with local (Exim 3.12 #1 (Debian))
	id 14XRd2-0006rB-00; Mon, 26 Feb 2001 18:40:08 +0100
Original-To: ding@gnus.org
X-Face: +kRV2]2q}lixHkE{U)mY#+6]{AH=yN~S9@IFiOa@X6?GM<U{B+4e{k79.Ya{~':DblFPCg$
 @60,BfLv2@SKZ19cMWK0/C'v;tM:|6B'R}U1rp6CL&kN({9<zF/V{:JCg27yC)9oZjeqcQawzKfiNL
 t9}`vjmK["dRQC/qGFQq"%u|Q`:6{"Rz}b(dnl_"3$Jtqimi>|8MBp/
In-Reply-To: <87k86d73ze.fsf_-_@deneb.enyo.de> (Florian Weimer's message of "26 Feb 2001 18:23:33 +0100")
User-Agent: Gnus/5.090001 (Oort Gnus v0.01) Emacs/20.7
Precedence: list
X-Majordomo: 1.94.jlt7
Original-Lines: 24
Xref: main.gmane.org gmane.emacs.gnus.general:35004
X-Report-Spam: http://spam.gmane.org/gmane.emacs.gnus.general:35004

Florian Weimer <fw@deneb.enyo.de> writes:
> (Of course, an undocumented
> variable will exist which permits canceling in all cases. ;-)

I think that should be reserved to those who can hack the code.

> In addition, the cancel message will be editable, much like a
> Supersede: message.

Not by default, I hope.  That should be a separate command.

> I think the
> best approach is to generate a secret string once (for example, a hash
> over the output of the date, ps, and ls ~ commands, or something like
> that, if /dev/[u]random is not available). 

Or "view-lossage" and the content of the *Messages* buffer.

> This way, we don't have to keep a database of cancel keys, and this
> system is safe as long as SHA-1 meets its design goals and the
> secret string is kept secret.

It is not a BIG secret, but it should probably be stored in a separate
unreadable file (e.g. News/cancel-lock) nonetheless.