Re: bug#7487: 24.0.50; Gnus nnimap broken

[Ted Zlatanov]

On Thu, 09 Dec 2010 22:10:35 +0100 Lars Magne Ingebrigtsen <larsi@gnus.org> 
wrote: 

LMI> Stefan Monnier <monnier@iro.umontreal.ca> writes:
>>> that I'm tempted to go back to just storing this data in the plain-text
>>> ~/.authinfo file until all this has been worked out.
>> 
>> No!!!! Or only after prompting the user five times for
>> (different) confirmation.

LMI> If you look at other widely used software packages, like Firefox, they
LMI> default to just storing the passwords in an (obfuscated) non-encrypted
LMI> file.  I don't think that's such a bad default.

It's a terrible default IMO.  But you knew I'd say that :)

LMI> If you want a more complicated credential storage setup, then that
LMI> should be a user option, not a default.  At present, the ~/.authinfo.gpg
LMI> credential storage is not something you can present to a normal user and
LMI> expect them to understand at all.

How about a .sgpg or .spg extension that signals EPA/EPG that only
symmetric encryption is desired?

Ted