[Aperture-devel] passwords in plain-text in rdf configurations

[Gunnar A. G. <gun...@df...>]

Hey all,

In gnowsis we have had issues with people complaining that their 
password for datasources (f.x. imap) is stored in plain-text in the 
configuration files on the harddisk. This is partly a gnowsis issue and 
partly an aperture issue.

As a first step to solve this I will add a encryptedPassword property to 
the datasource config schema.
* I will not say anything about what encryption should be used.
* I will not change any crawlers/datasource implementations to make use 
of this.
* Instead I will change gnowsis to decrypt this password just before 
calling aperture each time.

ok?

Thoughts? How is this handled in autofocus?
-- 
Gunnar Aastrand Grimnes
gunnar.grimnes [AT] dfki.de

DFKI GmbH
Knowledge Management
Erwin-Schroedinger-Strasse
D-67663 Kaiserslautern
Germany

Office: +49 631 205 4580
Mobile: +49 177 277 4397