[Spice-devel] [spice-gtk 0/5] Add support for looking up connection credentials in a file

[Marc-André Lureau]

----- Mensaje original -----
> On Tue, Jun 04, 2013 at 11:16:26AM -0400, Marc-André Lureau wrote:
> > Since you can already provide the password via either URI argument or by
> > API, there is no need for an additional way in spice-gtk.
> 
> I disagree with this statement (even if this will not be solved by this
> series). Something that is automatically used by spice-gtk when provided,
> but which is not as insecure as putting the password in the URI would be
> nice to have in spice-gtk.

The URI or API "password" property are not more insecure than a separate file.

Remember that spice-gtk isn't a client, and spicy is only for testing.