From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Ted Zlatanov Newsgroups: gmane.emacs.bugs Subject: bug#9113: 24.0.50; auth-sources: .authinfo versus .authinfo.gpg Date: Thu, 26 Jan 2012 09:32:38 -0600 Organization: =?UTF-8?Q?=D0=A2=D0=B5=D0=BE=D0=B4=D0=BE=D1=80_?= =?UTF-8?Q?=D0=97=D0=BB=D0=B0=D1=82=D0=B0=D0=BD=D0=BE=D0=B2?= @ Cienfuegos Message-ID: <87aa5aa38p.fsf@lifelogs.com> References: <87mxgcffq1.fsf@niu.edu> <87k44ffsdu.fsf@lifelogs.com> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: dough.gmane.org 1327588431 2271 80.91.229.12 (26 Jan 2012 14:33:51 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Thu, 26 Jan 2012 14:33:51 +0000 (UTC) Cc: 9113@debbugs.gnu.org, Roland Winkler To: Stefan Monnier Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Thu Jan 26 15:33:47 2012 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([140.186.70.17]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1RqQOY-0004kv-2w for geb-bug-gnu-emacs@m.gmane.org; Thu, 26 Jan 2012 15:33:46 +0100 Original-Received: from localhost ([::1]:41935 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RqQOX-00023o-GR for geb-bug-gnu-emacs@m.gmane.org; Thu, 26 Jan 2012 09:33:45 -0500 Original-Received: from eggs.gnu.org ([140.186.70.92]:43348) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RqQOQ-00023h-IF for bug-gnu-emacs@gnu.org; Thu, 26 Jan 2012 09:33:44 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1RqQOI-0002k7-4N for bug-gnu-emacs@gnu.org; Thu, 26 Jan 2012 09:33:38 -0500 Original-Received: from debbugs.gnu.org ([140.186.70.43]:39733) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RqQOI-0002k3-0L for bug-gnu-emacs@gnu.org; Thu, 26 Jan 2012 09:33:30 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.72) (envelope-from ) id 1RqQOn-00028m-Rz for bug-gnu-emacs@gnu.org; Thu, 26 Jan 2012 09:34:01 -0500 X-Loop: help-debbugs@gnu.org Resent-From: Ted Zlatanov Original-Sender: debbugs-submit-bounces@debbugs.gnu.org Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 26 Jan 2012 14:34:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 9113 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: Original-Received: via spool by 9113-submit@debbugs.gnu.org id=B9113.13275884308211 (code B ref 9113); Thu, 26 Jan 2012 14:34:01 +0000 Original-Received: (at 9113) by debbugs.gnu.org; 26 Jan 2012 14:33:50 +0000 Original-Received: from localhost ([127.0.0.1]:45120 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1RqQOb-00028N-AL for submit@debbugs.gnu.org; Thu, 26 Jan 2012 09:33:50 -0500 Original-Received: from cer-mailmxol2.jumptrading.com ([208.78.214.25]:65132) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1RqQOX-000284-Tj for 9113@debbugs.gnu.org; Thu, 26 Jan 2012 09:33:47 -0500 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Ap0EAN4iIU/AqF0N/2dsb2JhbABDr0uBcgEBBAF5EAsNFA8WDwEESQ4Fh3y4Jok9EAEIAQYEAwMEIgOCZR0OgQU0AgcagxoEiD+SV4x3 Original-Received: from unknown (HELO chiexchange02.w2k.jumptrading.com) ([192.168.93.13]) by cer-mailmxol2.jumptrading.com with ESMTP; 26 Jan 2012 14:34:34 +0000 Original-Received: from internalsmtp.w2k.jumptrading.com (10.2.4.29) by chiexchange02.w2k.jumptrading.com (10.2.4.71) with Microsoft SMTP Server id 8.2.176.0; Thu, 26 Jan 2012 08:33:07 -0600 Original-Received: from tzlatanov-ubuntu-desktop.jumptrading.com ([10.2.27.110]) by internalsmtp.w2k.jumptrading.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 26 Jan 2012 08:33:07 -0600 X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never Gmane-Reply-To-List: yes In-Reply-To: (Stefan Monnier's message of "Wed, 25 Jan 2012 21:02:12 -0500") User-Agent: Gnus/5.110018 (No Gnus v0.18) Emacs/24.0.92 (gnu/linux) X-OriginalArrivalTime: 26 Jan 2012 14:33:07.0747 (UTC) FILETIME=[6BD70F30:01CCDC37] X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 2) X-Received-From: 140.186.70.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:56031 Archived-At: On Wed, 25 Jan 2012 21:02:12 -0500 Stefan Monnier wrote: >> The Emacs maintainers asked me to make the default unencrypted. I don't >> think they will change their position. SM> I can't remember exactly how we got there. But I do agree that saving SM> a password unencrypted by default is not a good idea. I don't recall exactly either. But here's how we can proceed. We have several options: 1) go back to authinfo.gpg as the first choice 2) use unencrypted authinfo with encrypted password tokens, which looks like this: machine supertest password gpg:jA0EAwMC2tUEaZgM7A5gyWM/owySdCOS/cjoFCuf8LI1d1kYX7z6cjsNkakM04u1geh/iesqyH3XQFI+SEVLb/oEC/EoQ0LIgRRoBiLyu9XZWN1ytY7MQxpPZniFz13oGV4/Dwl8yrP3Hba5LfQpHy2FZRM= 3) work on the libnettle support (automatic if we use GnuTLS) so the external GPG executable is not needed to generate encrypted password tokens or encrypted authinfo files 4) use Daiki Ueno's plist storage format (already in auth-source but not well tested AFAIK) 5) ask the user if he has no authinfo file what he wants to do, and choose sensible defaults from the above depending on whether EPA/EPG and GPG; or libnettle are available. If we do that, `auth-sources' will be set to 'ask by default. Additionally, we should decide if any of this is happening for 24.1. I would really prefer to make the default more secure for 24.1. Ted