From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Reiner Steib Newsgroups: gmane.emacs.devel,gmane.emacs.gnus.general Subject: Re: encrypt.el in No Gnus 0.7 Date: Tue, 06 Nov 2007 22:11:12 +0100 Message-ID: References: <87zly3y4ru.fsf@catnip.gol.com> <87odejy30k.fsf@catnip.gol.com> <54a15d860710311830s4fa203e3y53fbd6f51496f007@mail.gmail.com> <54a15d860711010824w6888aafdgb0a0e5d48f6fdebb@mail.gmail.com> Reply-To: Reiner Steib NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: ger.gmane.org 1194383697 32395 80.91.229.12 (6 Nov 2007 21:14:57 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Tue, 6 Nov 2007 21:14:57 +0000 (UTC) Cc: miles@gnu.org, Ted Zlatanov , ueno@unixuser.org, ding@gnus.org, emacs-devel@gnu.org To: rms@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Tue Nov 06 22:14:59 2007 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1IpVlB-00053r-SW for ged-emacs-devel@m.gmane.org; Tue, 06 Nov 2007 22:14:58 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1IpVl0-0008MK-29 for ged-emacs-devel@m.gmane.org; Tue, 06 Nov 2007 16:14:46 -0500 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1IpVkw-0008Kc-Sd for emacs-devel@gnu.org; Tue, 06 Nov 2007 16:14:42 -0500 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1IpVkt-0008Ii-EV for emacs-devel@gnu.org; Tue, 06 Nov 2007 16:14:42 -0500 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1IpVkt-0008If-As for emacs-devel@gnu.org; Tue, 06 Nov 2007 16:14:39 -0500 Original-Received: from mail.uni-ulm.de ([134.60.1.11]) by monty-python.gnu.org with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.60) (envelope-from ) id 1IpVkF-0003Me-Fk; Tue, 06 Nov 2007 16:14:02 -0500 Original-Received: from bridgekeeper.physik.uni-ulm.de (bridgekeeper.physik.uni-ulm.de [134.60.41.37]) by mail.uni-ulm.de (8.14.1/8.14.1) with ESMTP id lA6LC9Rl020118; Tue, 6 Nov 2007 22:12:09 +0100 (MET) Original-Received: from localhost (bridgekeeper.physik.uni-ulm.de [134.60.41.37]) by bridgekeeper.physik.uni-ulm.de (Postfix) with ESMTP id ED32812C8D; Tue, 6 Nov 2007 22:12:08 +0100 (CET) X-Face: #vK]N[`vqjuod*|)'[iD7/"3AB-ApT%fmN"LWAg@oS7OesGv~)n[OBTLM#I="J'Y^-7I I/ps7o_'IK@#-Rs{::DZ@O8yS|fexe,XslY[:dNWOb~>?mC-&i_c)say:"\IpA.5U.b]'NY; Pks{lb h.+#6%DpZuaK3dcHB`Av3zc:r!C%~s0&m, tWj]&}, qg.+0ww2gK%f!:GK|wMl.I!(voY*1"^li8"~B BNG)9LvPi?^DMR-GVDnZqhu*3Hi, +g=wFhI)BL6&u{EOVEHjVEVq~d?_}lMntWAc3(6?kftjc>_f>! g0wM(qPM$d5]^TT_Qyi&L?LGVG)SHN;Gk/,pkY9,~ Mail-Followup-To: rms@gnu.org, Ted Zlatanov , ueno@unixuser.org, emacs-devel@gnu.org, ding@gnus.org, miles@gnu.org In-Reply-To: (Richard Stallman's message of "Mon, 05 Nov 2007 03:47:04 -0500") User-Agent: Gnus/5.110007 (No Gnus v0.7) Emacs/22.1.50 (gnu/linux) X-DCC-HP_X86_64_8CPU-Metrics: poseidon 1245; Body=6 Fuz1=6 Fuz2=6 X-Virus-Scanned: by amavisd-new X-detected-kernel: by monty-python.gnu.org: Genre and OS details not recognized. X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:82677 gmane.emacs.gnus.general:65568 Archived-At: On Mon, Nov 05 2007, Richard Stallman wrote: > RS> I just looked at encrypt.el. It appears to support just GnuPG > RS> and "Built-in simple XOR". And built-in simple XOR is just an > RS> example, not for real use. > > The idea is to allow users to supply their own ciphers, and to > support other external utilities as users find it necessary. > > It is a sensible feature, but is it worth including in Emacs? Some thoughts... I think it would be useful to have at least one builtin encryption (without requiring external programs) in Emacs, if possible. The cipher should be significantly better than obfuscation (ROT13) but it doesn't need to be as GPG's ciphers. I'm thinking of protection of for not-too-valuable stuff like email and NNTP passwords (e.g. passwords that are stored completely unprotected on disk by many users up to now) against (accidentally?) exposing it to your administrator, colleagues, family members, etc. How strong or week are the builtin ciphers compared to e.g. the algorithm used in Firefox/Thunderbird's password manager (I couldn't find out which cipher the use)? How long does it take on a "standard PC" to break an ~/.authinfo file protected with a password of say 8 chars? > Is there any sign that users use it? As it was not part of any released Gnus version, so I can't be in widespread use. Bye, Reiner. -- ,,, (o o) ---ooO-(_)-Ooo--- | PGP key available | http://rsteib.home.pages.de/