From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Ted Zlatanov Newsgroups: gmane.emacs.devel Subject: Re: can emacs use the mac os x keychain? Date: Thu, 29 Jul 2010 15:33:04 -0500 Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos Message-ID: <878w4uowov.fsf@lifelogs.com> References: <370a1897-25aa-418f-9631-1570dfa99de3@z7g2000yqb.googlegroups.com> <87633kaess.fsf@lifelogs.com> <8d7c78ee-6ba8-448a-8f86-3d585e1af77f@u32g2000vbc.googlegroups.com> <87vd8z2myy.fsf@lifelogs.com> <01ea3506-d715-491d-b360-3abf34e98013@i31g2000yqm.googlegroups.com> <87r5iq1hjk.fsf@lifelogs.com> <871vanu08g.fsf@lifelogs.com> <1622C7E7-9B12-4D53-954A-70A4BFBA0775@gmail.com> <8739v2s9z2.fsf@lifelogs.com> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: dough.gmane.org 1280437194 2564 80.91.229.12 (29 Jul 2010 20:59:54 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Thu, 29 Jul 2010 20:59:54 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Thu Jul 29 22:59:51 2010 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1OeaCk-0003DD-UB for ged-emacs-devel@m.gmane.org; Thu, 29 Jul 2010 22:59:51 +0200 Original-Received: from localhost ([127.0.0.1]:44702 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1OeZse-0000u8-Gy for ged-emacs-devel@m.gmane.org; Thu, 29 Jul 2010 16:39:04 -0400 Original-Received: from [140.186.70.92] (port=36004 helo=eggs.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1OeZn5-0005br-Ki for emacs-devel@gnu.org; Thu, 29 Jul 2010 16:33:20 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.69) (envelope-from ) id 1OeZn3-0001j8-OT for emacs-devel@gnu.org; Thu, 29 Jul 2010 16:33:19 -0400 Original-Received: from lo.gmane.org ([80.91.229.12]:55042) by eggs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1OeZn3-0001ix-Bm for emacs-devel@gnu.org; Thu, 29 Jul 2010 16:33:17 -0400 Original-Received: from list by lo.gmane.org with local (Exim 4.69) (envelope-from ) id 1OeZmz-0008KJ-Dw for emacs-devel@gnu.org; Thu, 29 Jul 2010 22:33:13 +0200 Original-Received: from 38.98.147.130 ([38.98.147.130]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Thu, 29 Jul 2010 22:33:13 +0200 Original-Received: from tzz by 38.98.147.130 with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Thu, 29 Jul 2010 22:33:13 +0200 X-Injected-Via-Gmane: http://gmane.org/ Original-Lines: 47 Original-X-Complaints-To: usenet@dough.gmane.org X-Gmane-NNTP-Posting-Host: 38.98.147.130 X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/24.0.50 (gnu/linux) Cancel-Lock: sha1:KB7on9iH540+5lOTZY0UP4AiMuM= X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 3) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:127986 Archived-At: On Thu, 29 Jul 2010 14:52:14 -0400 David Reitter wrote: DR> On Jul 29, 2010, at 9:17 AM, Ted Zlatanov wrote: >> AR> A useful-sounding idea but seems mainly like something that would be AR> a third-party package or maybe part of Aquamacs. Are there any AR> platform-independent parts of the needed functionality that the NS AR> port lacks and Emacs on X11 or W32 has? >> DR> ... >> Assuming we get the NS port access to the Mac OS X keychain, that leaves >> W32 as the only major platform lacking keychain support. I don't >> believe W32 has a standard keychain so that may be OK. DR> I principle, the C part would be fairly simple. There are separate DR> functions for "internet passwords", which retrieve and store DR> passwords for a host/port/account combination. DR> Am I right assuming that we would need an API paralleling that DR> provided by secrets.el? It can be different. auth-source.el folds the various backends under a common interface, so I think it's best to provide simple mappings to the underlying calls and let auth-source.el worry about the rest. The internet keychain calls, for instance, should be separated. DR> There are a few issues as far as I can see: DR> - The user is prompted via a graphical dialog to unlock a keychain DR> (i.e., to provide a password protecting all the passwords). When in DR> TTY, we shouldn't do this, but unlock the keychain ourselves, i.e., DR> read a password from the user via a (password) minibuffer. This DR> sort of interaction would have to be handled by an extra Lisp layer. DR> (Once the application is trusted, this prompt would go away.) How DR> is this done in GNOME? IMHO it's acceptable to unlock only from the GUI but I'm not opposed to what you describe. GNOME's Seahorse works only in X, not in the TTY. DR> - Any passwords that we obtain would probably have to be copied so DR> we can return them as a Lisp string. What provisions are in place DR> in order to protect the copy and guarantee its deletion after use? None from auth-source.el. I don't know if ELisp has any variable tags to do this protection but looking at the manual, I don't believe so. Ted