[Kmymoney-devel] Re: [Bug 256659] New: Make kdepimlibs dependency optional

[Thomas Baumgart]

Hi,

on Friday 12 November 2010 16:56:14 Jack wrote:

> On 2010.11.12 10:40, Cristian Oneţ wrote:
> > On Fri, Nov 12, 2010 at 5:29 PM, allan <aganderson at ukonline.co.uk>

[...]

> >> I agree with Jack's comment - it is a bit of a pain to install on
> >> say Ubuntu.
> >>
> >> Just one other point, though.  Without qgpgme, those users, or some
> >> of them, may want passwpord or other protection.
> >
> > I'm sorry but it is not the intent of this wish item to reduce some
> > dependencies and implement the features provided by the dropped
> > dependencies by hand. The point of it is to make these features
> > optional and if they are needed then one has to install the required
> > dependencies. We don't want to reinvent the wheel here.
> 
> I don't think anybody was suggesting that.  In the short term, if a
> user wants that functionality (encryption) the only option is
> kdepimlibs.  In the long run (but only if some developer cares enough)
> it would be nice (but obviously not required) to be able to use some
> other back end (such as gnupg directly, for example).  I agree that we
> should not try to implement that functionality directly within KMM.

In fact, that (usage of external GPG) should be stored somewhere in SVN as we 
had that when porting from KDE3. We had it working at some point and then 
switched over to the use of the KDEPIM libs. Here we go (for those who are 
interested):

http://websvn.kde.org/trunk/extragear/office/kmymoney/libkgpgfile/kgpgfile.cpp?r1=1053268&r2=1054747

Even if someone comes up with a separate wish list item for simple password 
protection, I have a strong opinion against it.  It would lure the user into a 
safe situation and he will trust us to protect his data. In fact, I don't know 
of any cipher expert among the KMyMoney devs who can assure that we have a 
strong protection which whatever code we provide for a password protection.

-- 

Regards

Thomas Baumgart

GPG-FP: E55E D592 F45F 116B 8429   4F99 9C59 DB40 B75D D3BA
-------------------------------------------------------------
What we call chaos is just patterns we haven't recognized.
What we call random is just patterns we can't decipher.
What we can't understand we call nonsense.
What we can't read we call gibberish. - Chuck Palahniuk
-------------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 225 bytes
Desc: This is a digitally signed message part.
Url : http://mail.kde.org/pipermail/kmymoney-devel/attachments/20101113/04c0d46a/attachment.sig