unofficial mirror of bug-gnu-emacs@gnu.org 
 help / color / mirror / code / Atom feed
* bug#72462: Having to store password in mutliple places
@ 2024-08-04 14:01 Pranshu
  2024-08-04 14:42 ` Andreas Schwab
  2024-08-04 14:44 ` Michael Albinus via Bug reports for GNU Emacs, the Swiss army knife of text editors
  0 siblings, 2 replies; 5+ messages in thread
From: Pranshu @ 2024-08-04 14:01 UTC (permalink / raw)
  To: 72462


Right now to get a functional gnus setup in which I can send and recive
mail, I am having to store my password is 2 places, which is the mail
sources variable, and the authinfo file.  This makes it extremly
annoying and insecure, especially since I cannot encrypt one fo the
places I store the password.

If I remove password from authinfo file, I can still recive mail but not
send any.  And if I remove password from mail sources, I cannot recive
mail without typing my whole password when prompted on gnus startup.

Following is the code I have:

Elisp code:
----------------------------------------------------------
(setq user-mail-address "pranshusharma366@gmail.com")
(setq user-full-name "Pranshu")
(setq smtpmail-smtp-server "smtp.gmail.com")
(setq smtpmail-smtp-service 465)
(setq smtpmail-stream-type  'ssl)
(setq mail-sources `((pop :server "pop.gmail.com"
						  :user ,user-mail-address
						  :password "**********" ; Password line
						  :port 995)))
----------------------------------------------------------


Authinfo:
----------------------------------------------------------
machine smtp.gmail.com login pranshusharma366@gmail.com password **********  port 465
----------------------------------------------------------





^ permalink raw reply	[flat|nested] 5+ messages in thread

* bug#72462: Having to store password in mutliple places
  2024-08-04 14:01 bug#72462: Having to store password in mutliple places Pranshu
@ 2024-08-04 14:42 ` Andreas Schwab
  2024-08-04 14:47   ` Eli Zaretskii
  2024-08-04 14:44 ` Michael Albinus via Bug reports for GNU Emacs, the Swiss army knife of text editors
  1 sibling, 1 reply; 5+ messages in thread
From: Andreas Schwab @ 2024-08-04 14:42 UTC (permalink / raw)
  To: Pranshu; +Cc: 72462

On Aug 05 2024, Pranshu wrote:

> Following is the code I have:
>
> Elisp code:
> ----------------------------------------------------------
> (setq user-mail-address "pranshusharma366@gmail.com")
> (setq user-full-name "Pranshu")
> (setq smtpmail-smtp-server "smtp.gmail.com")
> (setq smtpmail-smtp-service 465)
> (setq smtpmail-stream-type  'ssl)
> (setq mail-sources `((pop :server "pop.gmail.com"
> 						  :user ,user-mail-address
> 						  :password "**********" ; Password line
> 						  :port 995)))
> ----------------------------------------------------------
>
>
> Authinfo:
> ----------------------------------------------------------
> machine smtp.gmail.com login pranshusharma366@gmail.com password **********  port 465
> ----------------------------------------------------------

You should add an entry to authinfo for machine pop.gmail.com, then you
can remove the credentials from mail-sources.  That's still writing the
password twice, but at least it's next to each other in the same file.

-- 
Andreas Schwab, schwab@linux-m68k.org
GPG Key fingerprint = 7578 EB47 D4E5 4D69 2510  2552 DF73 E780 A9DA AEC1
"And now for something completely different."





^ permalink raw reply	[flat|nested] 5+ messages in thread

* bug#72462: Having to store password in mutliple places
  2024-08-04 14:01 bug#72462: Having to store password in mutliple places Pranshu
  2024-08-04 14:42 ` Andreas Schwab
@ 2024-08-04 14:44 ` Michael Albinus via Bug reports for GNU Emacs, the Swiss army knife of text editors
  1 sibling, 0 replies; 5+ messages in thread
From: Michael Albinus via Bug reports for GNU Emacs, the Swiss army knife of text editors @ 2024-08-04 14:44 UTC (permalink / raw)
  To: Pranshu; +Cc: 72462

Pranshu <pranshusharma366@gmail.com> writes:

Hi Pranshu,

> Right now to get a functional gnus setup in which I can send and recive
> mail, I am having to store my password is 2 places, which is the mail
> sources variable, and the authinfo file.  This makes it extremly
> annoying and insecure, especially since I cannot encrypt one fo the
> places I store the password.
>
> If I remove password from authinfo file, I can still recive mail but not
> send any.  And if I remove password from mail sources, I cannot recive
> mail without typing my whole password when prompted on gnus startup.
>
> Following is the code I have:
>
> Elisp code:
> ----------------------------------------------------------
> (setq user-mail-address "pranshusharma366@gmail.com")
> (setq user-full-name "Pranshu")
> (setq smtpmail-smtp-server "smtp.gmail.com")
> (setq smtpmail-smtp-service 465)
> (setq smtpmail-stream-type  'ssl)
> (setq mail-sources `((pop :server "pop.gmail.com"
> 						  :user ,user-mail-address
> 						  :password "**********" ; Password line
> 						  :port 995)))
> ----------------------------------------------------------
>
>
> Authinfo:
> ----------------------------------------------------------
> machine smtp.gmail.com login pranshusharma366@gmail.com password **********  port 465
> ----------------------------------------------------------

You can store both passwords in .authinfo, like

--8<---------------cut here---------------start------------->8---
machine smtp.gmail.com login pranshusharma366@gmail.com password **********  port 465
machine pop.gmail.com login pranshusharma366@gmail.com password **********  port 995
--8<---------------cut here---------------end--------------->8---

No need to keep it in the :password slot of mail-sources.

Best regards, Michael.





^ permalink raw reply	[flat|nested] 5+ messages in thread

* bug#72462: Having to store password in mutliple places
  2024-08-04 14:42 ` Andreas Schwab
@ 2024-08-04 14:47   ` Eli Zaretskii
  2024-08-17  8:52     ` Eli Zaretskii
  0 siblings, 1 reply; 5+ messages in thread
From: Eli Zaretskii @ 2024-08-04 14:47 UTC (permalink / raw)
  To: Andreas Schwab; +Cc: pranshusharma366, 72462

> Cc: 72462@debbugs.gnu.org
> From: Andreas Schwab <schwab@linux-m68k.org>
> Date: Sun, 04 Aug 2024 16:42:33 +0200
> 
> On Aug 05 2024, Pranshu wrote:
> 
> > Following is the code I have:
> >
> > Elisp code:
> > ----------------------------------------------------------
> > (setq user-mail-address "pranshusharma366@gmail.com")
> > (setq user-full-name "Pranshu")
> > (setq smtpmail-smtp-server "smtp.gmail.com")
> > (setq smtpmail-smtp-service 465)
> > (setq smtpmail-stream-type  'ssl)
> > (setq mail-sources `((pop :server "pop.gmail.com"
> > 						  :user ,user-mail-address
> > 						  :password "**********" ; Password line
> > 						  :port 995)))
> > ----------------------------------------------------------
> >
> >
> > Authinfo:
> > ----------------------------------------------------------
> > machine smtp.gmail.com login pranshusharma366@gmail.com password **********  port 465
> > ----------------------------------------------------------
> 
> You should add an entry to authinfo for machine pop.gmail.com, then you
> can remove the credentials from mail-sources.  That's still writing the
> password twice, but at least it's next to each other in the same file.

I think writing the password twice is unavoidable, since these are two
separate servers/services: one for receiving email, the other for
sending.  Am I right?





^ permalink raw reply	[flat|nested] 5+ messages in thread

* bug#72462: Having to store password in mutliple places
  2024-08-04 14:47   ` Eli Zaretskii
@ 2024-08-17  8:52     ` Eli Zaretskii
  0 siblings, 0 replies; 5+ messages in thread
From: Eli Zaretskii @ 2024-08-17  8:52 UTC (permalink / raw)
  To: pranshusharma366; +Cc: 72462-done, schwab

> Cc: pranshusharma366@gmail.com, 72462@debbugs.gnu.org
> Date: Sun, 04 Aug 2024 17:47:28 +0300
> From: Eli Zaretskii <eliz@gnu.org>
> 
> > Cc: 72462@debbugs.gnu.org
> > From: Andreas Schwab <schwab@linux-m68k.org>
> > Date: Sun, 04 Aug 2024 16:42:33 +0200
> > 
> > On Aug 05 2024, Pranshu wrote:
> > 
> > > Following is the code I have:
> > >
> > > Elisp code:
> > > ----------------------------------------------------------
> > > (setq user-mail-address "pranshusharma366@gmail.com")
> > > (setq user-full-name "Pranshu")
> > > (setq smtpmail-smtp-server "smtp.gmail.com")
> > > (setq smtpmail-smtp-service 465)
> > > (setq smtpmail-stream-type  'ssl)
> > > (setq mail-sources `((pop :server "pop.gmail.com"
> > > 						  :user ,user-mail-address
> > > 						  :password "**********" ; Password line
> > > 						  :port 995)))
> > > ----------------------------------------------------------
> > >
> > >
> > > Authinfo:
> > > ----------------------------------------------------------
> > > machine smtp.gmail.com login pranshusharma366@gmail.com password **********  port 465
> > > ----------------------------------------------------------
> > 
> > You should add an entry to authinfo for machine pop.gmail.com, then you
> > can remove the credentials from mail-sources.  That's still writing the
> > password twice, but at least it's next to each other in the same file.
> 
> I think writing the password twice is unavoidable, since these are two
> separate servers/services: one for receiving email, the other for
> sending.  Am I right?

No further comments, so I presume the problem is solved by the above
advice, and I'm therefore closing this bug.





^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2024-08-17  8:52 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2024-08-04 14:01 bug#72462: Having to store password in mutliple places Pranshu
2024-08-04 14:42 ` Andreas Schwab
2024-08-04 14:47   ` Eli Zaretskii
2024-08-17  8:52     ` Eli Zaretskii
2024-08-04 14:44 ` Michael Albinus via Bug reports for GNU Emacs, the Swiss army knife of text editors

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/emacs.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).