xdg-basedir for secrets

[Bardot Jérôme]

Le 06/06/2019 à 23:15, Jonas DOREL a écrit :
> Hi,
>
hi
> Currently, most secrets (SSH Keys, GPG Keys, OAuth token) seems to be
> located in XDG_CONFIG_HOME.
And they should not, secrets are data not config. (for me)
>
> However I think one of the interests of the XDG basedir specification is
> to facilitate the management of those different files (backup,
> publication, mount, ...) because of the different policies applying to
> those files.
For me as far as possible all /home data should have an as strict as
possible policy.
>
> But it don't think secrets should be handled the same way as
> configuration. What do you think about adding XDG_KEYS_HOME (maybe
> .secrets or .local/secrets) and XDG_KEYS_DIR ?

If we start to manage things by there purpose (and we should (my point
of view)) some others concern will be.

if i do it for my emails, or my calendars, or my bookmark we need a
strict policy behaviours.

Which program can access at what. And what about the storage
(xml/txt/maildir/vbox etc).

For me storage should be program agnostic. (the same data should be use
by the user prefered software)

but my last email about that not look really welcome.


I m not part of anything so it’s maybe for that but i’m glad to see I m
not alone with this kind of ideas.


>
> Jonas DOREL
>
jerome


sry for my bad english

> _______________________________________________
> xdg mailing list
> xdg at lists.freedesktop.org
> https://lists.freedesktop.org/mailman/listinfo/xdg


-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x053A41EF03878A98.asc
Type: application/pgp-keys
Size: 3098 bytes
Desc: not available
URL: <https://lists.freedesktop.org/archives/xdg/attachments/20190607/f9c5d26c/attachment.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 899 bytes
Desc: OpenPGP digital signature
URL: <https://lists.freedesktop.org/archives/xdg/attachments/20190607/f9c5d26c/attachment.sig>