Re: Current network-password-saving feature needs improvement.

[ERDI Gergo <cactus cactus rulez org>]

Hi,

While reading the Sun security report (which is great to have, btw), I had
this idea of a low-tech, localized (i.e. it doesn't require rewriting code
in lots of places) solution, which is to modify GConf to support
memory-only keys. That is, a special schema flag would make GConf not save
a key's value to disk. So when you use the first app that wants your HTTP
proxy password (or any other password), you type it in, the app sets the
GConf key, and gconfd remembers it so other apps can access it -- but only
until you log out.

Does this make any sense?

-- 
   .--= ULLA! =---------------------.   `We are not here to give users what
   \     http://cactus.rulez.org     \   they want'  -- RMS, at GUADEC 2001
    `---= cactus cactus rulez org =---'
"Invalid use of null" = "You can't use nothing right"