Re: [Evolution] login password

On Mon, 2011-01-17 at 11:01 -0600, Albert Wagner wrote:
On Mon, 2011-01-17 at 09:24 +0000, Pete Biggs wrote:
Why does it keep my mail account password in the Gnome keyring?

Because that's how it's programmed.

As to philosophically why it does it, I presume that's because it
removes the need for the programmers to implement (and maintain) a
secure store for passwords - 

So, Thunderbird implements and maintains a secure store for mail
passwords without the need for me to reveal my login password? 

There's no need to reveal your login password - what are you going on

evolution programmers expect my login password in order to save them a
little added work?

No, not at all.  Please find out about thing before assuming the worst.

why do it when there is a gnome component
that is specifically designed to keep passwords safe.

Because my passwords being kept safe is for MY convenience, not yours.

Nothing to do with me.

If you have disabled Gnome keyring, then that's probably why it keeps
asking for your password - Evo has no other place to store passwords,

You have no other place to store passwords because you failed to design
and code a place to store passwords.

Again, nothing to do with me - why the "you" all the time??  I'm just a

And, for your information, Evolution used to have it's own password
store, but FOR SECURITY REASONS the task of securely storing passwords
was handed over to gnome keyring.

hence it needs to ask you for them each time.

And I don't think you need to be particularly "experienced" with them to
let a program use keyrings - it's just an encrypted store of passwords.

My login password allows anyone with access to it, including evolution
developers, to perform actions requiring root permissions.

You can put any password you want on the gnome keyring - it doesn't have
to be your login password.  The prompt for a password is not an
evolution one either, so even if you do use a precious password, then
Evo never sees it.  Please stop talking bullshit.

 Giving you
access to my login password is a severe security breach, and all for
your convenience, not mine. Frankly, I am surprised that you have been
getting away it.  Haven't any other users complained?

No, all other users see it as a benefit.  If you don't like the way
Evolution does things, you are at liberty to submit patches to "improve"
things or use another piece of software.


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]