[Bug 174706] SMTP password(s) should be optionally cached

[Malte S. Stretz]

http://bugs.kde.org/show_bug.cgi?id=174706





--- Comment #4 from Malte S. Stretz <kde-bugger msquadrat de>  2008-11-10 20:34:03 ---
Well, thanks for the reply.  As I wrote before, I don't really see the
difference between caching the IMAP password (or using a persistent connection)
and caching the SMTP password.  Hmmm... would you accept a patch for persistent
SMTP connections? :)

KWallet only allows you to completely disallow applications from accessing the
wallet; once allowed eg. KWalletManager, it has access (or the user can simply
change the config to make it allowed).  Everything else is technically
impossible and I doubt I can file a sane report against KWallet for this.

But in the end its you decision, so I've got to work around KMails
shortcomings.

I can't just work around the problem by using sendmail because I've gotta save
the password in plain on the harddisk then, making the treatment for the
symptom worse than it was without it.

I guess I'll just disable the "Close when unused for N seconds" feature in
KWallet again.  That's unfortunate because I lose some security. But typing in
the wallet password all the time just gets on my nerves.  And is actually less
secure than caching the password because each time I type the password somebody
could peek above my shoulder while getting his hands on the password stored in
RAM is a lot harder.


-- 
Configure bugmail: http://bugs.kde.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.