Re: [Evolution] login password

[Pete Biggs <pete biggs org uk>]

On Mon, 2011-01-17 at 11:01 -0600, Albert Wagner wrote:
> On Mon, 2011-01-17 at 09:24 +0000, Pete Biggs wrote:
> > > Why does it keep my mail account password in the Gnome keyring?
> >
> > Because that's how it's programmed.
> >
> > As to philosophically why it does it, I presume that's because it
> > removes the need for the programmers to implement (and maintain) a
> > secure store for passwords - 
>
> So, Thunderbird implements and maintains a secure store for mail
> passwords without the need for me to reveal my login password? 

There's no need to reveal your login password - what are you going on
about???

>  But
> evolution programmers expect my login password in order to save them a
> little added work?

No, not at all.  Please find out about thing before assuming the worst.

> > why do it when there is a gnome component
> > that is specifically designed to keep passwords safe.
>
> Because my passwords being kept safe is for MY convenience, not yours.

Nothing to do with me.


> > If you have disabled Gnome keyring, then that's probably why it keeps
> > asking for your password - Evo has no other place to store passwords,
>
> You have no other place to store passwords because you failed to design
> and code a place to store passwords.


Again, nothing to do with me - why the "you" all the time??  I'm just a
user.

And, for your information, Evolution used to have it's own password
store, but FOR SECURITY REASONS the task of securely storing passwords
was handed over to gnome keyring.

> > hence it needs to ask you for them each time.
> >
> > And I don't think you need to be particularly "experienced" with them to
> > let a program use keyrings - it's just an encrypted store of passwords.
>
> My login password allows anyone with access to it, including evolution
> developers, to perform actions requiring root permissions.

You can put any password you want on the gnome keyring - it doesn't have
to be your login password.  The prompt for a password is not an
evolution one either, so even if you do use a precious password, then
Evo never sees it.  Please stop talking bullshit.

>  Giving you
> access to my login password is a severe security breach, and all for
> your convenience, not mine. Frankly, I am surprised that you have been
> getting away it.  Haven't any other users complained?

No, all other users see it as a benefit.  If you don't like the way
Evolution does things, you are at liberty to submit patches to "improve"
things or use another piece of software.

P.