[Bug 14003] Connection: interface to ask for credentials

bugzilla-daemon at freedesktop.org bugzilla-daemon at freedesktop.org
Mon May 10 11:15:52 CEST 2010


https://bugs.freedesktop.org/show_bug.cgi?id=14003

--- Comment #8 from Will Thompson <will.thompson at collabora.co.uk> 2010-05-10 02:15:51 PDT ---
(In reply to comment #7)
> To address the ever-recurring concern with sending plaintext passwords over
> D-Bus, could CMs that implement TP_PLAINTEXT be advised to implement another
> mechanism that wraps the password into a secure communication session using,
> say, Diffie-Hellman key exchange?

This sounds good to me. I noticed that the Shared Secrets D-Bus API (as now
implemented by Gnome Keyring) does the same:
http://people.gnome.org/~stefw/secrets/html/ch06.html

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.



More information about the telepathy-bugs mailing list