Re: secure plist store

[Ted Zlatanov]

On Wed, 29 Jun 2011 18:05:36 +0900 Daiki Ueno <address@hidden> wrote: 

DU> Lars Magne Ingebrigtsen <address@hidden> writes:
>>> I didn't notice that the field encryption code is already checked in.
>>> However, it does not work for me at all and looks too complicated - also
>>> it apparently does not benefit from GPG2 passphrase caching (see "(auth)
>>> GnuPG and EasyPG Assistant Configuration").
>> 
Lars> Can't it be altered to support passphrase caching?

DU> Not really - GPG2 passphrase caching is smarter than elisp level caching
DU> as it uses unique ID embedded in GPG data, so it allows user to share
DU> passphrases even among multiple Emacs processes.

...so you're saying we don't benefit from a feature we can't use?  What
are we supposed to change or improve?

>>> --8<---------------cut here---------------start------------->8---
>>> (("baz" :secret-user t :host "baz.example.org")
>>> ("bar" :secret-user t :host "bar.example.org")
>>> ("foo" :host "foo.example.org" :port 80))

Lars> The nice thing about the netrc format is that people can edit it
Lars> themselves.  This looks more fragile.

DU> The above format is tentative and could be improved.  

The nicest thing about the netrc format, IMHO, is that other programs
understand it.  Your proposal is no better than a binary store as far as
other programs are concerned.  The GPG tokens we currently have are
backwards compatible, meaning that they can be mixed with unencrypted
lines and tokens, and that's the reason we did them that way.

DU> Anyway, as the encrypted fields in netrc is also not easily editable
DU> and given that the people editing netrc are kind of power user, how
DU> about making netrc files as fallback and read-only from Gnus?

The encrypted fields are not supposed to be editable, though that's not
hard to provide.

Editing the netrc directly is not a power user feature.  They are very
easy to read and understand.  I have shown dozens of people with various
skill levels how to use them and the only question they tend to ask is
"what about spaces in the password?"

Ted