also sprach Patrick Ben Koetter <p...@state-of-mind.de> [2012.08.16.2044 +0200]: > Putting passwords in configs isn't something I like, so > I pull them from the Gnome keyring:
Not a bad idea, but now an attacker with access to the filesystem doesn't have to run 'cat ~/.muttrc' but 'gnome-keyring-query get mutt' instead. -- martin | http://madduck.net/ | http://two.sentenc.es/ fitter, healthier, more productive like a pig, in a cage, on antibiotics -- radiohead spamtraps: madduck.bo...@madduck.net
digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current)
