Re: Storing sensitive data indefinitely in variables or buffers: Whether and how to fix?

[<tomas@tuxteam.de>]

[-- Attachment #1: Type: text/plain, Size: 1304 bytes --]

On Wed, May 31, 2023 at 11:39:31AM -0500, Adam Porter wrote:

[...]

> Since then we've gained the `persist' and `multisession' libraries, which
> seem like good tools, but neither one offers secure storage.
> 
> I think Emacs needs a new library to store Lisp data securely.  Ideally the
> API would simply return a Lisp object which could be used with common
> functions like alist-get, gethash, etc. to read data.  For writing, perhaps
> some kind of simple macro or function wrapper that would store the data
> securely, as-configured, without the application needing to know the
> details.
> 
> Even more ideally, such a feature would be part of `persist' and/or
> `multisession', or at least be built on top of them, to avoid having
> yet-another data-persistence library.

This sounds enticing from a technical POV. OTOH, I'm a bit wary of a
big intransparent cache dump.

I'm already wrangling with Org caching (for now, my sweet spot
seems to be directing it to a non-existing directory and ignoring
the complaints: paradoxically, Emacs is snappier then).

I'd hate to end up with a setup like the monster browsers have
these days: an obscure set of sqlite databases you need a huge
amount of dedication to extract some slivers of information from.

Cheers
-- 
t

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]