[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-devel
Subject:    Re: IBM Applies for Password Manager Patent
From:       George Staikos <staikos () kde ! org>
Date:       2003-11-11 17:44:34
[Download RAW message or body]

On Tuesday 11 November 2003 12:19, Paul Campbell wrote:
> On Tuesday 11 November 2003 05:42 am, George Staikos wrote:
> > On Monday 10 November 2003 16:55, Paul Campbell wrote:
> > > config kwallet to do what the Apple ones did where I could
> > > have the system automatically use my login password to open
> > > the wallet?)
> >
> >   Horrible idea...  Where do we store your password in order
> > to do this?
>
> you don't, you use the login password when typed and apply it to
> unlock the wallet during the login process (I realise this is a
> problem in the unix/X/KDE world because login and the window
> manager are usually seperate worlds - KDM and KDE could however
> be persuaded to work together. (obviously there would have to be
> a dialog to handle the case where the user's password has
> changed and the wallet needs to be reencrypted)

   How do you plan to save to that file in the future then?  You still need 
the password in memory.

   I'm willing to entertain patches, and I have no intention of implementing 
this myself, but I will definitely be careful about what is accepted for 
this.  I don't want to defeat the efforts I put into this.  I already have 
had people complain that kwallet is not secure enough, too secure, annoying, 
perfect, just secure enough, etc.  I can't please everyone, and I can only 
add so many configuration settings.

   I think your request is reasonable, but very insecure in comparison, and I 
would probably put a big ugly warning alongside that option, disabled by 
default.  If you are keen though, please feel free to send a patch.

-- 
George Staikos
KDE Developer				http://www.kde.org/
Staikos Computing Services Inc.		http://www.staikos.net/

 
>> Visit http://mail.kde.org/mailman/listinfo/kde-devel#unsub to unsubscribe <<
[prev in list] [next in list] [prev in thread] [next in thread]