Kmail passwords

Kevin Krammer kevin.krammer at gmx.at
Mon Jan 23 17:12:59 GMT 2012


On Monday, 2012-01-23, Peter G Nikolic wrote:

> > In any case this won't change anything for the thread starter until there
> > is a service implementation that does not store the data in an encrypted
> > file but in plain text based file(s).
> > 
> > Cheers,
> > Kevin
> 
> Errrrrrrrrrrrr  the passwords were never stored as PLAIN TEXT in the old
> kmailrc files they were always munged somehow

True, obfusicated. Pretty worthless security wise though.

> a far superiour idea ti
> this new crazy idea of centeralised password storage

Can't agree on crazy since I think secure storage is hard to do and should not 
be reimplemented again and again.
Definitely not new though, KWallet exists since KDE 2 times.
Used even for form completion data.

> screw one file bing
> all your passwords gone

True, though I never heard about that have happend. Easier to backup though.

> old style  screw a file only passwords for that
> application gone everything else unnafected  far safer

So I take it you don't mind security related data being properly encrypted as 
long as it is spread over several files?

Should be possible to implement a secret service doing that, maybe gnome-
keyring even does?

Cheers,
Kevin
-- 
Kevin Krammer, KDE developer, xdg-utils developer
KDE user support, developer mentoring
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part.
URL: <http://mail.kde.org/pipermail/kde/attachments/20120123/9f060585/attachment.sig>
-------------- next part --------------
___________________________________________________
This message is from the kde mailing list.
Account management:  https://mail.kde.org/mailman/listinfo/kde.
Archives: http://lists.kde.org/.
More info: http://www.kde.org/faq.html.


More information about the kde mailing list