GNU bug report logs - #72462
Having to store password in mutliple places

Previous Next

Full log

View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: Eli Zaretskii <eliz <at> gnu.org>
Cc: tracker <at> debbugs.gnu.org
Subject: bug#72462: closed (Having to store password in mutliple places)
Date: Sat, 17 Aug 2024 08:53:02 +0000

[Message part 1 (text/plain, inline)]

Your message dated Sat, 17 Aug 2024 11:52:07 +0300
with message-id <86a5hb4jm0.fsf <at> gnu.org>
and subject line Re: bug#72462: Having to store password in mutliple places
has caused the debbugs.gnu.org bug report #72462,
regarding Having to store password in mutliple places
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs <at> gnu.org.)


-- 
72462: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=72462
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems

[Message part 2 (message/rfc822, inline)]

From: Pranshu <pranshusharma366 <at> gmail.com>
To: bug-gnu-emacs <at> gnu.org
Subject: Having to store password in mutliple places
Date: Mon, 05 Aug 2024 00:01:36 +1000

Right now to get a functional gnus setup in which I can send and recive
mail, I am having to store my password is 2 places, which is the mail
sources variable, and the authinfo file.  This makes it extremly
annoying and insecure, especially since I cannot encrypt one fo the
places I store the password.

If I remove password from authinfo file, I can still recive mail but not
send any.  And if I remove password from mail sources, I cannot recive
mail without typing my whole password when prompted on gnus startup.

Following is the code I have:

Elisp code:
----------------------------------------------------------
(setq user-mail-address "pranshusharma366 <at> gmail.com")
(setq user-full-name "Pranshu")
(setq smtpmail-smtp-server "smtp.gmail.com")
(setq smtpmail-smtp-service 465)
(setq smtpmail-stream-type  'ssl)
(setq mail-sources `((pop :server "pop.gmail.com"
						  :user ,user-mail-address
						  :password "**********" ; Password line
						  :port 995)))
----------------------------------------------------------


Authinfo:
----------------------------------------------------------
machine smtp.gmail.com login pranshusharma366 <at> gmail.com password **********  port 465
----------------------------------------------------------

[Message part 3 (message/rfc822, inline)]

From: Eli Zaretskii <eliz <at> gnu.org>
To: pranshusharma366 <at> gmail.com
Cc: 72462-done <at> debbugs.gnu.org, schwab <at> linux-m68k.org
Subject: Re: bug#72462: Having to store password in mutliple places
Date: Sat, 17 Aug 2024 11:52:07 +0300

> Cc: pranshusharma366 <at> gmail.com, 72462 <at> debbugs.gnu.org
> Date: Sun, 04 Aug 2024 17:47:28 +0300
> From: Eli Zaretskii <eliz <at> gnu.org>
> 
> > Cc: 72462 <at> debbugs.gnu.org
> > From: Andreas Schwab <schwab <at> linux-m68k.org>
> > Date: Sun, 04 Aug 2024 16:42:33 +0200
> > 
> > On Aug 05 2024, Pranshu wrote:
> > 
> > > Following is the code I have:
> > >
> > > Elisp code:
> > > ----------------------------------------------------------
> > > (setq user-mail-address "pranshusharma366 <at> gmail.com")
> > > (setq user-full-name "Pranshu")
> > > (setq smtpmail-smtp-server "smtp.gmail.com")
> > > (setq smtpmail-smtp-service 465)
> > > (setq smtpmail-stream-type  'ssl)
> > > (setq mail-sources `((pop :server "pop.gmail.com"
> > > 						  :user ,user-mail-address
> > > 						  :password "**********" ; Password line
> > > 						  :port 995)))
> > > ----------------------------------------------------------
> > >
> > >
> > > Authinfo:
> > > ----------------------------------------------------------
> > > machine smtp.gmail.com login pranshusharma366 <at> gmail.com password **********  port 465
> > > ----------------------------------------------------------
> > 
> > You should add an entry to authinfo for machine pop.gmail.com, then you
> > can remove the credentials from mail-sources.  That's still writing the
> > password twice, but at least it's next to each other in the same file.
> 
> I think writing the password twice is unavoidable, since these are two
> separate servers/services: one for receiving email, the other for
> sending.  Am I right?

No further comments, so I presume the problem is solved by the above
advice, and I'm therefore closing this bug.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.