Re: Disabling plain-text password storage by defult

2018-10-31 Thread Branko Čibej
On 31.10.2018 13:01, Julian Foad wrote: > Stefan Sperling wrote: >> On Wed, Oct 31, 2018 at 02:49:57AM +0100, Branko Čibej wrote: >>> Given that we support a number of secure credentials stores, I >> propose >>> that, starting with 1.14.0 LTS, we disable the on-disk plain-text >>> password store by

Re: Disabling plain-text password storage by defult

2018-10-31 Thread Julian Foad
Stefan Sperling wrote: >On Wed, Oct 31, 2018 at 02:49:57AM +0100, Branko Čibej wrote: >> Given that we support a number of secure credentials stores, I >propose >> that, starting with 1.14.0 LTS, we disable the on-disk plain-text >> password store by default. > >Why not start with 1.12.0? +1 to do

Re: Disabling plain-text password storage by defult

2018-10-31 Thread Stefan Sperling
On Wed, Oct 31, 2018 at 02:49:57AM +0100, Branko Čibej wrote: > Given that we support a number of secure credentials stores, I propose > that, starting with 1.14.0 LTS, we disable the on-disk plain-text > password store by default. Why not start with 1.12.0?

Disabling plain-text password storage by defult

2018-10-30 Thread Branko Čibej
Given that we support a number of secure credentials stores, I propose that, starting with 1.14.0 LTS, we disable the on-disk plain-text password store by default. I've prepared a patch for configure.ac to issue appropriate warnings before that time. If we decide to do this, we should also mention