Re: netrc field encryption in auth-source

[Robert Pluim]

Ted Zlatanov <address@hidden> writes:

> On Thu, 16 Jun 2011 10:32:15 +0200 Robert Pluim <address@hidden> wrote: 
> RP> How about something like
>
> RP> "This controls what auth-source will do with password tokens: save them,
> RP> ask, store as gpg tokens in .authinfo"
>
> You're just listing the defcustom choices in the docstring itself.  What
> if we add choices?  We have to edit the docstring again.
>
> How about "Set this to tell auth-source how to handle password tokens in
> unencrypted files."
>

Yes, that would be better (although I think an indication in the
defcustom choices that 'gpg will result in saving tokens to .authinfo
would be good as well)

> RP> Also, does ask mean 'ask once', or does it mean 'ask every time'? I'm
> RP> personally looking for something that would give me "don't store
> RP> passwords and don't ask me about storing them except maybe the first
> RP> time".
>
> I'm not sure yet.  Right now it's once per Emacs session, if 'ask, but I
> left the default nil since it's 100% experimental.  So users that update
> blindly will not be affected at all, for now.
>
> I can certainly use Customize to set it to 'gpg or nil forever after the
> first time it's asked.  The problem is, I'm also not sure if it should
> be a single global setting.  It feels like something that should be
> decided for each individual netrc file.  And if that's the case, maybe
> the defcustom should hold that choice in an alist with regex matching.

Hmm, a single global setting works for me, but I can envisage people
desiring to have different values for different servers, not just
different files. At that point we'd be stuffing server values in the
custom variables, and we're back at square one. Would a new keyword in
the file itself work?  save-token {cleartext,ask,gpg,no}? Tell me if I'm
over-engineering this :)

Robert