Re: Proposal for Seahorse inclusion in GNOME 2.18

[Alexander Larsson <alexl redhat com>]

On Mon, 2006-09-11 at 21:54 +0000, Nate Nielsen wrote:
> Alexander Larsson wrote:
> > On Sun, 2006-09-10 at 00:55 +0000, Nate Nielsen wrote:
> >> The underlying concepts and technologies of gnome-keyring (which really
> >> should be 'gnome-password') and encryption keys are extremely different.
> > 
> > There is nothing conceptually that limits gnome-keyring to passwords. As
> > long as the secret can be encoded as a string, and referenced/found via
> > attributes that are ints and strings it can be stored in gnome-keyring.
> 
> True. I hadn't thought about that. An interesting thought for developers
> of any hand rolled crypto in GNOME.

It was designed to allow this openness. Whether its the right design and
usable for this stuff, I dunno. Unfortunately I don't have a lot of time
to splend on gnome-keyring these days.

> Obviously all the current crypto libraries and apps come with their own
> storage methods for key data. They're also much further down in the
> stack: OpenSSH, GnuPG, NSS, GnuTLS, OpenSSL

The case of SSL is an actual user problem. We really need a way to allow
ssl certificates to be shared between appd. I think the NSS people are
working on a session global shared store for this.

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
 Alexander Larsson                                            Red Hat, Inc 
                   alexl redhat com    alla lysator liu se 
He's an underprivileged Jewish dog-catcher on his last day in the job. She's a 
disco-crazy bisexual hooker from Mars. They fight crime!