Re: [gcmd-dev] [NEW] Use of GNOME authentication manager for user's security credentials

[Petr Tomasek]

On Thu, Oct 18, 2007 at 08:44:55PM +0200, Magnus Stålnacke wrote:
> Piotr Eljasiak wrote:
> >
> >Just try to open connection with CTRL+F (or CTRL+N) in gcmd. As password
> >is not stored by gcmd anymore, GNOME authentication manager will ask you
> >for that - then entered password can be stored internally by
> >authentication manager and reused if necessary. 
> 
> I feel a security issue.

Actually using one proper designed authentication manager is much more
secure, that every application storing their password by themselves
(mostly not encrypted!)

> Nothing specific, just a feeling about that
> manager of putting all the eggs in the same
> basket.
> 
> It is also yet another gnomeish-dep.

-- 
Petr Tomasek <http://www.etf.cuni.cz/~tomasek>
Jabber: address@hidden
SIP: address@hidden