Re: [Gnu-arch-users] proposal : ~/.authinfo

[Matthieu Moy]

Tom Lord <address@hidden> writes:

> and then you can register an archive with something like:
>
>
>     tla register-archive $ARCHIVENAME http://%s:address@hidden/$PATH

Hmm,  actually, this  is not  a really  good idea  : Passwords  on the
command line should really be avoided as much as possible :

* while the command  is being ran, any other user  on the same machine
  can get the arguments with a simple "ps u"

* After running the command, it is often archived in a ~/.bash_history
  or  ~/.history, which  is not  necessarily read-protected  for other
  users, ... 

So, we would just offer the user a potential security hole ... :-(

A better option would be to  offer the user to keep his password after
entering it with getpass().

-- 
Matthieu