From: Lars Ingebrigtsen <larsi@gnus.org>
To: 37196@debbugs.gnu.org
Subject: bug#37196: 27.0.50; auth-source no longer obfuscates passwords
Date: Fri, 20 Sep 2019 22:13:11 +0200 [thread overview]
Message-ID: <87sgoq7mlk.fsf@gnus.org> (raw)
In-Reply-To: <87woe27my9.fsf@gnus.org> (Lars Ingebrigtsen's message of "Fri, 20 Sep 2019 22:05:34 +0200")
Lars Ingebrigtsen <larsi@gnus.org> writes:
> Hm. Now that I typed that, it strikes me that this should be rather
> trivial to do with gnutls-symmetric-encrypt on systems where that is
> available. I'll give it a go...
Fortunately I remembered that I had already written all this symmetric
encryption stuff in a separate project, so I just cut and paste a bit.
(I mean, the encryption primitives are already in Emacs, but actually
using them requires a bit of typing...)
(auth-source-search :max 1 :host "foo.bar")
=> ((:host "foo.bar" :user "zot" :secret #[0 "..." ["Ng==-26GRPWrYlJnQAE+8gaEDcg==-DThpcRwaAi5ZBXQZC0rC3g==" (nil) auth-source--deobfuscate] 3]))
There. That's better. It does leak that the password is 6 characters
long, though, but that's a lot less leaky than ... it was before.
--
(domestic pets only, the antidote for overdose, milk.)
bloggy blog: http://lars.ingebrigtsen.no
prev parent reply other threads:[~2019-09-20 20:13 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-08-27 10:29 bug#37196: 27.0.50; auth-source no longer obfuscates passwords Lars Ingebrigtsen
2019-09-20 20:05 ` Lars Ingebrigtsen
2019-09-20 20:13 ` Lars Ingebrigtsen [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87sgoq7mlk.fsf@gnus.org \
--to=larsi@gnus.org \
--cc=37196@debbugs.gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this external index
https://git.savannah.gnu.org/cgit/emacs.git
https://git.savannah.gnu.org/cgit/emacs/org-mode.git
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.