From: Tim Cross <theophilusx@gmail.com>
To: Emacs developers <emacs-devel@gnu.org>
Subject: Re: auth-source change default spec
Date: Sat, 28 Apr 2012 18:46:21 +1000 [thread overview]
Message-ID: <CAC=50j_ch4Ys-=-+Vp+r-92LiaEhS-vCy_7wy6RfftM7HHMUOw@mail.gmail.com> (raw)
In-Reply-To: <CAC=50j9vcUkaT8AWgC8K=f08dOyrXWvjzk4K53F+iQgThV8rgQ@mail.gmail.com>
P.S. I also forgot to mention. It looks like auth-source.el has
(require 'assoc)
which emacs tells me is an obsolete package. Should this be addressed
prior to emacs 24?
Tim
On 28 April 2012 10:45, Tim Cross <theophilusx@gmail.com> wrote:
> I've recently run into a minor problem with the auth-source library
> which I think is due to the default SPEC for auth-sources. I wanted
> some feedbak before logging a bug request and also wanted to make this
> possible issue visible asap given the need to get defaults sorted for
> the next release.
>
> The current default sorces spec (taken from recent emacs bzr sources) is
>
> ("~/.authinfo" "~/.authinfo.gpg" "~/.netrc")
>
> I think it should be changed to have .authinfo.gpg first in the list.
> The reason is that if you already have a .authinfo.gpg file and then
> attempt to access a resource for which you don't yet have credentials
> and the search criteria specifies the :create option, because
> .authinfo is first, it will attempt to save the credentials in the
> .authinfo file and not .authinfo.gpg. If you have things configured to
> ask if you want to save (the default) it will ask if you want to save
> to .authinfo even when it is aware you have a .authinfo.gpg file. It
> does not appear to give you an option to change this. If you just
> accept the defaults and you do use .authinfo.gpg, things will break
> when you add new credentials because it will create a .authinfo file.
> Subsequent searches will never see the credentials you already have in
> your .authinfo.gpg file as the search stops it has found the .authinfo
> file.
>
> I also think that putting the GPG version first would encourage better
> practices. On many systems, especially GNU Linux, gpg will already be
> installed. I guess it may be an issue on other platforms, but still
> think it is better to go for the more secure solution as the default,
> even if that does create some additional work for those who don't want
> to bothwer with encryptiong and are happy with a less secure approach.
>
> If this is not acceptable, I think the auth-source library may need to
> be enhanced so that it defaults to the gpg version of the file for
> saving when it knows one already exists.
>
> Tim
>
>
> --
> Tim Cross
--
Tim Cross
next prev parent reply other threads:[~2012-04-28 8:46 UTC|newest]
Thread overview: 29+ messages / expand[flat|nested] mbox.gz Atom feed top
2012-04-28 0:45 auth-source change default spec Tim Cross
2012-04-28 8:46 ` Tim Cross [this message]
2012-04-28 15:08 ` Stefan Monnier
2012-04-29 0:04 ` Tim Cross
2012-04-30 12:23 ` Ted Zlatanov
2012-04-30 12:51 ` Richard Riley
2012-04-30 22:41 ` Tim Cross
2012-05-01 14:00 ` Ted Zlatanov
2012-05-01 21:41 ` Tim Cross
2012-05-02 12:25 ` Ted Zlatanov
2012-05-02 13:59 ` menu system in recent Emacs? (was: auth-source change default spec) Ted Zlatanov
2012-05-02 14:37 ` menu system in recent Emacs? Davis Herring
2012-05-02 15:07 ` Ted Zlatanov
2012-05-02 18:52 ` Tassilo Horn
2012-05-02 19:35 ` Ted Zlatanov
2012-05-02 18:00 ` Eric Schulte
2012-05-02 21:34 ` Ted Zlatanov
2012-05-02 23:52 ` Thien-Thi Nguyen
2012-05-03 0:53 ` Ted Zlatanov
2012-05-03 1:12 ` Thien-Thi Nguyen
2012-05-03 1:44 ` Ted Zlatanov
2012-05-03 1:47 ` Stefan Monnier
2012-05-03 5:21 ` Thierry Volpiatto
2012-05-03 6:25 ` Thierry Volpiatto
2012-05-03 7:13 ` Thien-Thi Nguyen
2012-05-03 7:28 ` Thierry Volpiatto
2012-05-03 6:18 ` Stefan Reichör
2012-05-03 12:01 ` Ted Zlatanov
2012-05-03 4:09 ` auth-source change default spec Tim Cross
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='CAC=50j_ch4Ys-=-+Vp+r-92LiaEhS-vCy_7wy6RfftM7HHMUOw@mail.gmail.com' \
--to=theophilusx@gmail.com \
--cc=emacs-devel@gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this external index
https://git.savannah.gnu.org/cgit/emacs.git
https://git.savannah.gnu.org/cgit/emacs/org-mode.git
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.