Re: [Monotone-devel] passphrase management

[Nathaniel Smith]

On Sun, Oct 29, 2006 at 12:52:52PM +1100, Brian May wrote:
> I really think that not every private key needs to be encrypted, and
> there are some applications where this is better (e.g. for server use;
> ssh doesn't require a passphrase to access its private key stored in
> /etc/ssh).

Yeah, this is basically a bug, as far as I know.  No-one's ever gotten
around to fixing things so leaving off a passphrase just works, is
all.

> Sidenote: For the case where the user enters the passphrase in
> manually via a prompt, does monotone use non-swappable memory to store
> this passphrase?

No, actually -- though perhaps it should.

-- Nathaniel

-- 
The Universe may  /  Be as large as they say
But it wouldn't be missed  /  If it didn't exist.
  -- Piet Hein