From unknown Sat Aug 16 21:20:33 2025 X-Loop: help-debbugs@gnu.org Subject: bug#8069: 23.2.94; auth-source should support ~/.netrc by default Resent-From: Reuben Thomas Original-Sender: debbugs-submit-bounces@debbugs.gnu.org Resent-To: owner@debbugs.gnu.org Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 17 Feb 2011 22:06:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 8069 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: 8069@debbugs.gnu.org X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.129798036232089 (code B ref -1); Thu, 17 Feb 2011 22:06:02 +0000 Received: (at submit) by debbugs.gnu.org; 17 Feb 2011 22:06:02 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1PqBz7-0008LS-GT for submit@debbugs.gnu.org; Thu, 17 Feb 2011 17:06:02 -0500 Received: from eggs.gnu.org ([140.186.70.92]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1PqBz4-0008LF-V4 for submit@debbugs.gnu.org; Thu, 17 Feb 2011 17:06:00 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1PqC7r-0003kn-OI for submit@debbugs.gnu.org; Thu, 17 Feb 2011 17:15:05 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-4.2 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED autolearn=unavailable version=3.3.1 Received: from lists.gnu.org ([199.232.76.165]:39344) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1PqC7r-0003ke-KR for submit@debbugs.gnu.org; Thu, 17 Feb 2011 17:15:03 -0500 Received: from [140.186.70.92] (port=51749 helo=eggs.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1PqC7q-00085O-22 for bug-gnu-emacs@gnu.org; Thu, 17 Feb 2011 17:15:03 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1PqC7m-0003iJ-Sx for bug-gnu-emacs@gnu.org; Thu, 17 Feb 2011 17:15:01 -0500 Received: from exprod7og124.obsmtp.com ([64.18.2.26]:38590) by eggs.gnu.org with smtp (Exim 4.71) (envelope-from ) id 1PqC7m-0003hK-Hr for bug-gnu-emacs@gnu.org; Thu, 17 Feb 2011 17:14:58 -0500 Received: from source ([74.125.82.177]) (using TLSv1) by exprod7ob124.postini.com ([64.18.6.12]) with SMTP ID DSNKTV2d4LyRiNwESWIMNsOGl5BVgZiEiu4G@postini.com; Thu, 17 Feb 2011 14:14:58 PST Received: by mail-wy0-f177.google.com with SMTP id 22so2852249wyf.8 for ; Thu, 17 Feb 2011 14:14:56 -0800 (PST) Received: by 10.216.150.129 with SMTP id z1mr2001124wej.113.1297980895387; Thu, 17 Feb 2011 14:14:55 -0800 (PST) Received: from canta (87-194-87-241.bethere.co.uk [87.194.87.241]) by mx.google.com with ESMTPS id n11sm597996wej.43.2011.02.17.14.14.53 (version=TLSv1/SSLv3 cipher=OTHER); Thu, 17 Feb 2011 14:14:54 -0800 (PST) From: Reuben Thomas Date: Thu, 17 Feb 2011 22:14:53 +0000 Message-ID: <87pqqqb95u.fsf@sc3d.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6, seldom 2.4 (older, 4) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 2) X-Received-From: 199.232.76.165 X-Spam-Score: -6.0 (------) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -6.0 (------) auth-source is trying to encourage users to use ~/.authinfo rather than ~/.netrc. This is fine. But many programs and libraries still use ~/.netrc (personally, until reading the auth-source manual I had not heard of ~/.authinfo). auth-source also wants to encourage users to encrypt their ~/.authinfo file (indeed, by default it searches ~/.authinfo.gpg, not ~/.authinfo). The manual actually says =E2=80=9Cthe auth-source library encourages this confusion=E2=80=9D. It is not a good idea to encourage confusion (even if t= his remark is made tongue-in-cheek, auth-source=E2=80=99s current behaviour does indeed encourage confusion). Hence, I suggest that with a bit of psychological carrot and stick, auth-source could get closer to its goal: Carrot: Default to searching ~/.netrc (unencrypted), ~/.authinfo (unencrypted), and ~/.authinfo.gpg (encrypted). This means that users with an unencrypted file or old-name file are not annoyed. By all means create a symlink from ~/.authinfo to ~/.netrc if the former doesn=E2=80=99t already exist, and don=E2=80=99t actually search ~/.netrc. (But maybe that = would create potential security problems of its own.) Stick: Display a minibuffer warning message when an unencrypted file is found. Thus, the user is not actually interrupted (which breeds annoyance), but does receive a gentle reminder that encrypted is better. (You could display a more urgent message, or interrupt the user, if a world-readable authorisation file is found.) Note that this suggestion does not affect users who have already migrated to ~/.authinfo{,.gpg}. In GNU Emacs 23.2.94.1 (i686-pc-linux-gnu, GTK+ Version 2.22.0) of 2011-02-15 on canta Windowing system distributor `The X.Org Foundation', version 11.0.10900000 Important settings: value of $LC_ALL: nil value of $LC_COLLATE: nil value of $LC_CTYPE: nil value of $LC_MESSAGES: nil value of $LC_MONETARY: nil value of $LC_NUMERIC: nil value of $LC_TIME: nil value of $LANG: en_GB.UTF-8 value of $XMODIFIERS: nil locale-coding-system: utf-8-unix default enable-multibyte-characters: t Major mode: Info Minor modes in effect: diff-auto-refine-mode: t recentf-mode: t show-paren-mode: t savehist-mode: t minibuffer-electric-default-mode: t iswitchb-mode: t icomplete-mode: t global-whitespace-mode: t global-auto-revert-mode: t desktop-save-mode: t etags-update-mode: t mouse-wheel-mode: t file-name-shadow-mode: t global-font-lock-mode: t font-lock-mode: t blink-cursor-mode: t auto-encryption-mode: t auto-compression-mode: t column-number-mode: t line-number-mode: t transient-mark-mode: t Recent input: y y y C-a C-x=20 C-f L u a / b i t l =20 M a k . a =20 C-x b C-h i C-s a u t o c o n f M-< =20 =20 =20 =20 =20 =20 =20 =20 n C-s g p g C-a C-n C-n C-n C-n C-n C-n C-n C-n C-n=20 C-n C-n C-n C-n C-s E P A C-s C-s C-s C-s C-s C-s C-s=20 C-s C-s C-s C-a C-s n e t r c C-s C-s C-s C-s C-s C-s=20 C-s C-s C-s C-s C-s C-s C-s C-s C-a C-s u s e r s '=20 C-s C-a C-s C-s C-s C-s C-s C-s C-a M-x r e p o r t=20 - b e e m a c s - b u g =20 R T y p o SPC i n SPC a u =20 " H e l p SPC f o r SPC d e v e l o p e r s " S-SPC=20 n o d e SPC o f SPC a u t h - s o u r c e SPC m a n=20 u a l u s e r s C-q ' SPC - > S-SPC u s e=20 r C-q ' s C-c C-c y e s M-x r e p o r t -=20 e m a c s - b u g Recent messages: Ignoring redundant directory /usr/share/emacs-snapshot/site-lisp/bbdb Checking 1 files in /usr/share/emacs/site-lisp/autoconf... Ignoring redundant directory /usr/share/emacs-snapshot/site-lisp/auctex Checking 21 files in /usr/share/emacs/site-lisp/auctex... Ignoring redundant directory /usr/share/emacs-snapshot/site-lisp/inform-mode Ignoring redundant directory /usr/share/emacs-snapshot/site-lisp/ocaml-mode Checking for load-path shadows...done Sending... Sending via mail... Sending...done Load-path shadows: /home/rrt/.emacs.d/elpa/ruby-mode-1.1/ruby-mode hides /usr/share/emacs-snap= shot/site-lisp/ruby1.8-elisp/ruby-mode /home/rrt/.emacs.d/elpa/css-mode-1.0/css-mode hides /usr/local/share/emacs/= 23.2.94/site-lisp/css-mode/css-mode /home/rrt/.emacs.d/elpa/dictionary-1.8.7/link hides /usr/local/share/emacs/= 23.2.94/site-lisp/dictionary-el/link /home/rrt/.emacs.d/elpa/dictionary-1.8.7/connection hides /usr/local/share/= emacs/23.2.94/site-lisp/dictionary-el/connection /home/rrt/.emacs.d/elpa/dictionary-1.8.7/dictionary-init hides /usr/local/s= hare/emacs/23.2.94/site-lisp/dictionary-el/dictionary-init /home/rrt/.emacs.d/elpa/dictionary-1.8.7/dictionary hides /usr/local/share/= emacs/23.2.94/site-lisp/dictionary-el/dictionary /home/rrt/local/share/emacs/site-lisp/dict hides /usr/local/share/emacs/23.= 2.94/site-lisp/emacs-goodies-el/dict /home/rrt/.emacs.d/elpa/css-mode-1.0/css-mode hides /usr/local/share/emacs/= 23.2.94/lisp/textmodes/css-mode /home/rrt/.emacs.d/elpa/ruby-mode-1.1/ruby-mode hides /usr/local/share/emac= s/23.2.94/lisp/progmodes/ruby-mode /home/rrt/.emacs.d/elpa/css-mode-1.0/css-mode hides /usr/share/emacs/site-l= isp/css-mode/css-mode /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex-info hides /usr/share/e= macs/site-lisp/auctex/tex-info /usr/local/share/emacs/23.2.94/site-lisp/auctex/context-nl hides /usr/share= /emacs/site-lisp/auctex/context-nl /usr/local/share/emacs/23.2.94/site-lisp/auctex/context-en hides /usr/share= /emacs/site-lisp/auctex/context-en /usr/local/share/emacs/23.2.94/site-lisp/auctex/latex hides /usr/share/emac= s/site-lisp/auctex/latex /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex-mik hides /usr/share/em= acs/site-lisp/auctex/tex-mik /usr/local/share/emacs/23.2.94/site-lisp/dictionary-el/lpath hides /usr/sha= re/emacs/site-lisp/auctex/lpath /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex-buf hides /usr/share/em= acs/site-lisp/auctex/tex-buf /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex-jp hides /usr/share/ema= cs/site-lisp/auctex/tex-jp /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex-bar hides /usr/share/em= acs/site-lisp/auctex/tex-bar /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex hides /usr/share/emacs/= site-lisp/auctex/tex /usr/local/share/emacs/23.2.94/site-lisp/auctex/multi-prompt hides /usr/sha= re/emacs/site-lisp/auctex/multi-prompt /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex-fptex hides /usr/share/= emacs/site-lisp/auctex/tex-fptex /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex-font hides /usr/share/e= macs/site-lisp/auctex/tex-font /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex-fold hides /usr/share/e= macs/site-lisp/auctex/tex-fold /usr/local/share/emacs/23.2.94/site-lisp/auctex/texmathp hides /usr/share/e= macs/site-lisp/auctex/texmathp /usr/local/share/emacs/23.2.94/site-lisp/auctex/context hides /usr/share/em= acs/site-lisp/auctex/context /usr/local/share/emacs/23.2.94/site-lisp/auctex/font-latex hides /usr/share= /emacs/site-lisp/auctex/font-latex /usr/local/share/emacs/23.2.94/site-lisp/auctex/bib-cite hides /usr/share/e= macs/site-lisp/auctex/bib-cite /usr/local/share/emacs/23.2.94/site-lisp/auctex/toolbar-x hides /usr/share/= emacs/site-lisp/auctex/toolbar-x /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex-style hides /usr/share/= emacs/site-lisp/auctex/tex-style Features: (gnus-msg gnus-art mm-uu mml2015 epg-config mm-view smime dig gnus-sum nnoo gnus-group gnus-undo nnmail mail-source format-spec gnus-start gnus-spec gnus-int gnus-range gnus-win gnus gnus-ems shadow sort message sendmail ecomplete rfc822 mml mml-sec password-cache mm-decode mm-bodies mm-encode mailcap mail-parse rfc2231 rfc2047 rfc2045 qp ietf-drums mailabbrev nnheader gnus-util netrc time-date mm-util mail-prsvr gmm-utils mailheader canlock sha1 hex-util hashcash mail-utils emacsbug info find-func pp novice autoconf autoconf-mode tar-mode jka-compr bibtex log-edit pcvs-util add-log diff-git diff-mode vc vc-dispatcher cperl-mode vc-git mail-extr make-mode tabify inform-mode cus-edit texmathp preview prv-emacs byte-opt warnings tex-buf noutline outline font-latex bytecomp byte-compile latex tex-style tex latexenc newcomment grep compile longlines face-remap flyspell multi-isearch dired-aux dired help-mode view filladapt completing-help recentf tree-widget wid-edit uniquify paren savehist minibuf-eldef iswitchb icomplete whitespace autorevert time cus-start cus-load desktop server php-mode etags cc-langs cc-mode cc-fonts cc-menus cc-cmds cc-styles cc-align cc-engine cc-vars cc-defs speedbar sb-image ezimage dframe lua-mode regexp-opt comint ring ropemacs pymacs smart-quotes ffap ispell etags-update auto-dictionary-autoloads css-mode-autoloads dictionary-autoloads diff-git-autoloads dired-isearch-autoloads full-ack-autoloads guess-style-autoloads js2-mode-autoloads kill-ring-search-autoloads lambdacalc-autoloads magit-autoloads mv-shell-autoloads ruby-mode-autoloads tumble-autoloads http-post-simple-autoloads package reporter advice advice-preload yasnippet help-fns derived edmacro kmacro easymenu assoc cl cl-19 muse-autoloads emacs-goodies-el emacs-goodies-custom emacs-goodies-loaddefs easy-mmode bbdb-autoloads preview-latex tex-site auto-loads tooltip ediff-hook vc-hooks lisp-float-type mwheel x-win x-dnd font-setting tool-bar dnd fontset image fringe lisp-mode register page menu-bar rfn-eshadow timer select scroll-bar mldrag mouse jit-lock font-lock syntax facemenu font-core frame cham georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korean japanese hebrew greek romanian slovak czech european ethiopic indian cyrillic chinese case-table epa-hook jka-cmpr-hook help simple abbrev loaddefs button minibuffer faces cus-face files text-properties overlay md5 base64 format env code-pages mule custom widget hashtable-print-readable backquote make-network-process dbusbind system-font-setting font-render-setting gtk x-toolkit x multi-tty emacs) --=20 http://rrt.sc3d.org/ From unknown Sat Aug 16 21:20:33 2025 X-Loop: help-debbugs@gnu.org Subject: bug#8069: 23.2.94; auth-source should support ~/.netrc by default Resent-From: Lars Magne Ingebrigtsen Original-Sender: debbugs-submit-bounces@debbugs.gnu.org Resent-To: owner@debbugs.gnu.org Resent-CC: bug-gnu-emacs@gnu.org, bugs@gnus.org Resent-Date: Fri, 18 Feb 2011 00:38:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 8069 X-GNU-PR-Package: emacs,gnus X-GNU-PR-Keywords: To: Reuben Thomas Cc: 8069@debbugs.gnu.org Received: via spool by 8069-submit@debbugs.gnu.org id=B8069.129798945011664 (code B ref 8069); Fri, 18 Feb 2011 00:38:01 +0000 Received: (at 8069) by debbugs.gnu.org; 18 Feb 2011 00:37:30 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1PqELh-000324-N2 for submit@debbugs.gnu.org; Thu, 17 Feb 2011 19:37:29 -0500 Received: from baybryj.net ([198.144.208.130] helo=lenovo) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1PqELf-00031r-06 for 8069@debbugs.gnu.org; Thu, 17 Feb 2011 19:37:27 -0500 Received: from larsi by lenovo with local (Exim 4.72) (envelope-from ) id 1PqELd-0007Mb-T5; Thu, 17 Feb 2011 16:37:25 -0800 From: Lars Magne Ingebrigtsen In-Reply-To: (Reuben Thomas's message of "Thu, 17 Feb 2011 22:14:53 +0000") Date: Thu, 17 Feb 2011 16:37:24 -0800 Message-ID: <87oc6a6uuz.fsf@gnus.org> References: User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/24.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.6 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -2.6 (--) Reuben Thomas writes: > auth-source is trying to encourage users to use ~/.authinfo rather than > ~/.netrc. This is fine. But many programs and libraries still use > ~/.netrc (personally, until reading the auth-source manual I had not > heard of ~/.authinfo). I don't quite remember why we started using ~/.authinfo instead of ~/.netrc? I think that change was done a long, long time ago. (At least for nntp.el.) Anybody remember? Was there a technical reason? This was done in: 66292b12 lisp/nntp.el (Lars Magne Ingebrigtsen 1998-03-07 16:19:30 +00= 00 243) (defcustom nntp-authinfo-file "~/.authinfo" and the ChangeLog entry helpfully says + * nntp.el (nntp-authinforc-file): Changed default. Yay me. But, yes, I think ~/.netrc should be added to the list of auth sources to consult. > Carrot: Default to searching ~/.netrc (unencrypted), ~/.authinfo > (unencrypted), and ~/.authinfo.gpg (encrypted). This means that users > with an unencrypted file or old-name file are not annoyed. Agreed. > By all means create a symlink from ~/.authinfo to ~/.netrc if the > former doesn=92t already exist, and don=92t actually search ~/.netrc. (But > maybe that would create potential security problems of its own.) Nah. Symlinks shouldn't be necessary. > Stick: Display a minibuffer warning message when an unencrypted file is > found. Thus, the user is not actually interrupted (which breeds > annoyance), but does receive a gentle reminder that encrypted is better. No, I don't think any reminders are necessary. It's perfectly reasonable to keep your passwords (for services you don't consider to be super-secret for you) unencrypted. --=20 (domestic pets only, the antidote for overdose, milk.) larsi@gnus.org * Lars Magne Ingebrigtsen From unknown Sat Aug 16 21:20:33 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.427 (Entity 5.427) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Reuben Thomas Subject: bug#8069: closed (Re: bug#8069: 23.2.94; auth-source should support ~/.netrc by default) Message-ID: References: <87pqqqb95u.fsf@sc3d.org> X-Gnu-PR-Message: they-closed 8069 X-Gnu-PR-Package: emacs,gnus Reply-To: 8069@debbugs.gnu.org Date: Thu, 30 Jun 2011 00:16:01 +0000 Content-Type: multipart/mixed; boundary="----------=_1309392961-22259-1" This is a multi-part message in MIME format... ------------=_1309392961-22259-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #8069: 23.2.94; auth-source should support ~/.netrc by default which was filed against the emacs,gnus package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 8069@debbugs.gnu.org. --=20 8069: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D8069 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1309392961-22259-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 8069-close) by debbugs.gnu.org; 30 Jun 2011 00:15:21 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1Qc4ue-0005Rj-AE for submit@debbugs.gnu.org; Wed, 29 Jun 2011 20:15:20 -0400 Received: from hermes.netfonds.no ([80.91.224.195]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1Qc4uc-0005IJ-MW for 8069-close@debbugs.gnu.org; Wed, 29 Jun 2011 20:15:19 -0400 Received: from cm-84.215.51.58.getinternet.no ([84.215.51.58] helo=quimbies.gnus.org) by hermes.netfonds.no with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1Qc4uO-0006vT-Cs; Thu, 30 Jun 2011 02:15:04 +0200 From: Lars Magne Ingebrigtsen To: Reuben Thomas Subject: Re: bug#8069: 23.2.94; auth-source should support ~/.netrc by default In-Reply-To: <87oc6a6uuz.fsf@gnus.org> (Lars Magne Ingebrigtsen's message of "Thu, 17 Feb 2011 16:37:24 -0800") Date: Thu, 30 Jun 2011 02:12:16 +0200 Message-ID: References: <87oc6a6uuz.fsf@gnus.org> User-Agent: Gnus/5.110018 (No Gnus v0.18) Emacs/24.0.50 (gnu/linux) Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAGFBMVEUUGCwBAAIFBAmdpL/d 4O8DAgUJCBFHUnIa7oGaAAACSUlEQVQ4jV2UzWvcMBDFB0rkaxxQz0Fgn0Ml0LUgw15jFfVsDNHZ VKb69/uerN2QisWs56c3H9KMRY9p/G+tOqUk60t+zzm/itqy7JvKTyqrTPAsm/B3iOLj+HuIyJRk 1OZ7jHEyeZ/Nvpt5hz5/APSlk8FK64q/LcZlTmmfuXOfUmqviNF2/97VhjiidpO0HrtCp3nOsNZa RWWTElxFKNbmRoZqra0HCBAA9qdMe1mwgj/orbnSMeeN9hACCeLAbu6gLjQ3jUJqcZJVN4ELASEs yE2YM9LVzAgBrO3kYGIAxkBwYn9xzloHoMyEGJopVdiKWxoJN+QVo6A6egqw22JdCYxuTJQXM28D Xi005bSh2lNQI1yZbRvOxdvgay3WnqV2EJkslvW++rMAv2X4khQZeynOwvKtAr7JA0CBELZCU29U wJeMVKC8BXsrkffthBFjpiu7ICE6guJnA2O6A19KRRW3rhj1jBgs+vS1oFJrb9IVG0BwASUgN8cr uYJfIOB4C87EueUCieBkWjS24/Wyd8DrQFa4juB4IeoBUEgI7rr1JXSQDEsnoWKhpwZWnMnWeid0 QT9dTAl9udYhfNijgzG9qt5uyyWgp1kSO5f92YG/PAGgted8J863viaYCGa2emFT16NdE9Pl+Nyn oB7HJaArrjhjMK912alok4NatmbP3W6kT2ZsI5gf9jtA/cZwONHPMX2CtYn4zgmInwDo+RjwfRie kpm+gPEXB8GGH/D0FbwPdRAZ/kxpmjrQ69hGnotRrqz+AU54AQVXl0XzAAAAAElFTkSuQmCC X-Now-Playing: Various's _A Tribute to Arthur Russell_: "Yam Who? feat Faze Action, Peter Gordon & Mary Moore - Go Bang!" X-Hashcash: 1:23:110630:rrt@sc3d.org::ocKppRzy5zFqpYgW:000003xNd X-Hashcash: 1:23:110630:8069@debbugs.gnu.org::+y4mU2DQFngzQc3Q:00000000000000000000000000000000000000000kueX MIME-Version: 1.0 Content-Type: text/plain X-MailScanner-ID: 1Qc4uO-0006vT-Cs X-Netfonds-MailScanner: Found to be clean X-Netfonds-MailScanner-From: larsi@gnus.org MailScanner-NULL-Check: 1309997704.86339@2rtjbnkTZdINjgVPwnM2Gg X-Spam-Status: No X-Spam-Score: -3.2 (---) X-Debbugs-Envelope-To: 8069-close Cc: 8069-close@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -3.2 (---) Lars Magne Ingebrigtsen writes: > But, yes, I think ~/.netrc should be added to the list of auth sources > to consult. This has been fixed in No Gnus now. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog http://lars.ingebrigtsen.no/ ------------=_1309392961-22259-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 17 Feb 2011 22:06:02 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1PqBz7-0008LS-GT for submit@debbugs.gnu.org; Thu, 17 Feb 2011 17:06:02 -0500 Received: from eggs.gnu.org ([140.186.70.92]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1PqBz4-0008LF-V4 for submit@debbugs.gnu.org; Thu, 17 Feb 2011 17:06:00 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1PqC7r-0003kn-OI for submit@debbugs.gnu.org; Thu, 17 Feb 2011 17:15:05 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-4.2 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED autolearn=unavailable version=3.3.1 Received: from lists.gnu.org ([199.232.76.165]:39344) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1PqC7r-0003ke-KR for submit@debbugs.gnu.org; Thu, 17 Feb 2011 17:15:03 -0500 Received: from [140.186.70.92] (port=51749 helo=eggs.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1PqC7q-00085O-22 for bug-gnu-emacs@gnu.org; Thu, 17 Feb 2011 17:15:03 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1PqC7m-0003iJ-Sx for bug-gnu-emacs@gnu.org; Thu, 17 Feb 2011 17:15:01 -0500 Received: from exprod7og124.obsmtp.com ([64.18.2.26]:38590) by eggs.gnu.org with smtp (Exim 4.71) (envelope-from ) id 1PqC7m-0003hK-Hr for bug-gnu-emacs@gnu.org; Thu, 17 Feb 2011 17:14:58 -0500 Received: from source ([74.125.82.177]) (using TLSv1) by exprod7ob124.postini.com ([64.18.6.12]) with SMTP ID DSNKTV2d4LyRiNwESWIMNsOGl5BVgZiEiu4G@postini.com; Thu, 17 Feb 2011 14:14:58 PST Received: by mail-wy0-f177.google.com with SMTP id 22so2852249wyf.8 for ; Thu, 17 Feb 2011 14:14:56 -0800 (PST) Received: by 10.216.150.129 with SMTP id z1mr2001124wej.113.1297980895387; Thu, 17 Feb 2011 14:14:55 -0800 (PST) Received: from canta (87-194-87-241.bethere.co.uk [87.194.87.241]) by mx.google.com with ESMTPS id n11sm597996wej.43.2011.02.17.14.14.53 (version=TLSv1/SSLv3 cipher=OTHER); Thu, 17 Feb 2011 14:14:54 -0800 (PST) From: Reuben Thomas To: bug-gnu-emacs@gnu.org Subject: 23.2.94; auth-source should support ~/.netrc by default Date: Thu, 17 Feb 2011 22:14:53 +0000 Message-ID: <87pqqqb95u.fsf@sc3d.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6, seldom 2.4 (older, 4) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 2) X-Received-From: 199.232.76.165 X-Spam-Score: -6.0 (------) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -6.0 (------) auth-source is trying to encourage users to use ~/.authinfo rather than ~/.netrc. This is fine. But many programs and libraries still use ~/.netrc (personally, until reading the auth-source manual I had not heard of ~/.authinfo). auth-source also wants to encourage users to encrypt their ~/.authinfo file (indeed, by default it searches ~/.authinfo.gpg, not ~/.authinfo). The manual actually says =E2=80=9Cthe auth-source library encourages this confusion=E2=80=9D. It is not a good idea to encourage confusion (even if t= his remark is made tongue-in-cheek, auth-source=E2=80=99s current behaviour does indeed encourage confusion). Hence, I suggest that with a bit of psychological carrot and stick, auth-source could get closer to its goal: Carrot: Default to searching ~/.netrc (unencrypted), ~/.authinfo (unencrypted), and ~/.authinfo.gpg (encrypted). This means that users with an unencrypted file or old-name file are not annoyed. By all means create a symlink from ~/.authinfo to ~/.netrc if the former doesn=E2=80=99t already exist, and don=E2=80=99t actually search ~/.netrc. (But maybe that = would create potential security problems of its own.) Stick: Display a minibuffer warning message when an unencrypted file is found. Thus, the user is not actually interrupted (which breeds annoyance), but does receive a gentle reminder that encrypted is better. (You could display a more urgent message, or interrupt the user, if a world-readable authorisation file is found.) Note that this suggestion does not affect users who have already migrated to ~/.authinfo{,.gpg}. In GNU Emacs 23.2.94.1 (i686-pc-linux-gnu, GTK+ Version 2.22.0) of 2011-02-15 on canta Windowing system distributor `The X.Org Foundation', version 11.0.10900000 Important settings: value of $LC_ALL: nil value of $LC_COLLATE: nil value of $LC_CTYPE: nil value of $LC_MESSAGES: nil value of $LC_MONETARY: nil value of $LC_NUMERIC: nil value of $LC_TIME: nil value of $LANG: en_GB.UTF-8 value of $XMODIFIERS: nil locale-coding-system: utf-8-unix default enable-multibyte-characters: t Major mode: Info Minor modes in effect: diff-auto-refine-mode: t recentf-mode: t show-paren-mode: t savehist-mode: t minibuffer-electric-default-mode: t iswitchb-mode: t icomplete-mode: t global-whitespace-mode: t global-auto-revert-mode: t desktop-save-mode: t etags-update-mode: t mouse-wheel-mode: t file-name-shadow-mode: t global-font-lock-mode: t font-lock-mode: t blink-cursor-mode: t auto-encryption-mode: t auto-compression-mode: t column-number-mode: t line-number-mode: t transient-mark-mode: t Recent input: y y y C-a C-x=20 C-f L u a / b i t l =20 M a k . a =20 C-x b C-h i C-s a u t o c o n f M-< =20 =20 =20 =20 =20 =20 =20 =20 n C-s g p g C-a C-n C-n C-n C-n C-n C-n C-n C-n C-n=20 C-n C-n C-n C-n C-s E P A C-s C-s C-s C-s C-s C-s C-s=20 C-s C-s C-s C-a C-s n e t r c C-s C-s C-s C-s C-s C-s=20 C-s C-s C-s C-s C-s C-s C-s C-s C-a C-s u s e r s '=20 C-s C-a C-s C-s C-s C-s C-s C-s C-a M-x r e p o r t=20 - b e e m a c s - b u g =20 R T y p o SPC i n SPC a u =20 " H e l p SPC f o r SPC d e v e l o p e r s " S-SPC=20 n o d e SPC o f SPC a u t h - s o u r c e SPC m a n=20 u a l u s e r s C-q ' SPC - > S-SPC u s e=20 r C-q ' s C-c C-c y e s M-x r e p o r t -=20 e m a c s - b u g Recent messages: Ignoring redundant directory /usr/share/emacs-snapshot/site-lisp/bbdb Checking 1 files in /usr/share/emacs/site-lisp/autoconf... Ignoring redundant directory /usr/share/emacs-snapshot/site-lisp/auctex Checking 21 files in /usr/share/emacs/site-lisp/auctex... Ignoring redundant directory /usr/share/emacs-snapshot/site-lisp/inform-mode Ignoring redundant directory /usr/share/emacs-snapshot/site-lisp/ocaml-mode Checking for load-path shadows...done Sending... Sending via mail... Sending...done Load-path shadows: /home/rrt/.emacs.d/elpa/ruby-mode-1.1/ruby-mode hides /usr/share/emacs-snap= shot/site-lisp/ruby1.8-elisp/ruby-mode /home/rrt/.emacs.d/elpa/css-mode-1.0/css-mode hides /usr/local/share/emacs/= 23.2.94/site-lisp/css-mode/css-mode /home/rrt/.emacs.d/elpa/dictionary-1.8.7/link hides /usr/local/share/emacs/= 23.2.94/site-lisp/dictionary-el/link /home/rrt/.emacs.d/elpa/dictionary-1.8.7/connection hides /usr/local/share/= emacs/23.2.94/site-lisp/dictionary-el/connection /home/rrt/.emacs.d/elpa/dictionary-1.8.7/dictionary-init hides /usr/local/s= hare/emacs/23.2.94/site-lisp/dictionary-el/dictionary-init /home/rrt/.emacs.d/elpa/dictionary-1.8.7/dictionary hides /usr/local/share/= emacs/23.2.94/site-lisp/dictionary-el/dictionary /home/rrt/local/share/emacs/site-lisp/dict hides /usr/local/share/emacs/23.= 2.94/site-lisp/emacs-goodies-el/dict /home/rrt/.emacs.d/elpa/css-mode-1.0/css-mode hides /usr/local/share/emacs/= 23.2.94/lisp/textmodes/css-mode /home/rrt/.emacs.d/elpa/ruby-mode-1.1/ruby-mode hides /usr/local/share/emac= s/23.2.94/lisp/progmodes/ruby-mode /home/rrt/.emacs.d/elpa/css-mode-1.0/css-mode hides /usr/share/emacs/site-l= isp/css-mode/css-mode /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex-info hides /usr/share/e= macs/site-lisp/auctex/tex-info /usr/local/share/emacs/23.2.94/site-lisp/auctex/context-nl hides /usr/share= /emacs/site-lisp/auctex/context-nl /usr/local/share/emacs/23.2.94/site-lisp/auctex/context-en hides /usr/share= /emacs/site-lisp/auctex/context-en /usr/local/share/emacs/23.2.94/site-lisp/auctex/latex hides /usr/share/emac= s/site-lisp/auctex/latex /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex-mik hides /usr/share/em= acs/site-lisp/auctex/tex-mik /usr/local/share/emacs/23.2.94/site-lisp/dictionary-el/lpath hides /usr/sha= re/emacs/site-lisp/auctex/lpath /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex-buf hides /usr/share/em= acs/site-lisp/auctex/tex-buf /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex-jp hides /usr/share/ema= cs/site-lisp/auctex/tex-jp /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex-bar hides /usr/share/em= acs/site-lisp/auctex/tex-bar /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex hides /usr/share/emacs/= site-lisp/auctex/tex /usr/local/share/emacs/23.2.94/site-lisp/auctex/multi-prompt hides /usr/sha= re/emacs/site-lisp/auctex/multi-prompt /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex-fptex hides /usr/share/= emacs/site-lisp/auctex/tex-fptex /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex-font hides /usr/share/e= macs/site-lisp/auctex/tex-font /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex-fold hides /usr/share/e= macs/site-lisp/auctex/tex-fold /usr/local/share/emacs/23.2.94/site-lisp/auctex/texmathp hides /usr/share/e= macs/site-lisp/auctex/texmathp /usr/local/share/emacs/23.2.94/site-lisp/auctex/context hides /usr/share/em= acs/site-lisp/auctex/context /usr/local/share/emacs/23.2.94/site-lisp/auctex/font-latex hides /usr/share= /emacs/site-lisp/auctex/font-latex /usr/local/share/emacs/23.2.94/site-lisp/auctex/bib-cite hides /usr/share/e= macs/site-lisp/auctex/bib-cite /usr/local/share/emacs/23.2.94/site-lisp/auctex/toolbar-x hides /usr/share/= emacs/site-lisp/auctex/toolbar-x /usr/local/share/emacs/23.2.94/site-lisp/auctex/tex-style hides /usr/share/= emacs/site-lisp/auctex/tex-style Features: (gnus-msg gnus-art mm-uu mml2015 epg-config mm-view smime dig gnus-sum nnoo gnus-group gnus-undo nnmail mail-source format-spec gnus-start gnus-spec gnus-int gnus-range gnus-win gnus gnus-ems shadow sort message sendmail ecomplete rfc822 mml mml-sec password-cache mm-decode mm-bodies mm-encode mailcap mail-parse rfc2231 rfc2047 rfc2045 qp ietf-drums mailabbrev nnheader gnus-util netrc time-date mm-util mail-prsvr gmm-utils mailheader canlock sha1 hex-util hashcash mail-utils emacsbug info find-func pp novice autoconf autoconf-mode tar-mode jka-compr bibtex log-edit pcvs-util add-log diff-git diff-mode vc vc-dispatcher cperl-mode vc-git mail-extr make-mode tabify inform-mode cus-edit texmathp preview prv-emacs byte-opt warnings tex-buf noutline outline font-latex bytecomp byte-compile latex tex-style tex latexenc newcomment grep compile longlines face-remap flyspell multi-isearch dired-aux dired help-mode view filladapt completing-help recentf tree-widget wid-edit uniquify paren savehist minibuf-eldef iswitchb icomplete whitespace autorevert time cus-start cus-load desktop server php-mode etags cc-langs cc-mode cc-fonts cc-menus cc-cmds cc-styles cc-align cc-engine cc-vars cc-defs speedbar sb-image ezimage dframe lua-mode regexp-opt comint ring ropemacs pymacs smart-quotes ffap ispell etags-update auto-dictionary-autoloads css-mode-autoloads dictionary-autoloads diff-git-autoloads dired-isearch-autoloads full-ack-autoloads guess-style-autoloads js2-mode-autoloads kill-ring-search-autoloads lambdacalc-autoloads magit-autoloads mv-shell-autoloads ruby-mode-autoloads tumble-autoloads http-post-simple-autoloads package reporter advice advice-preload yasnippet help-fns derived edmacro kmacro easymenu assoc cl cl-19 muse-autoloads emacs-goodies-el emacs-goodies-custom emacs-goodies-loaddefs easy-mmode bbdb-autoloads preview-latex tex-site auto-loads tooltip ediff-hook vc-hooks lisp-float-type mwheel x-win x-dnd font-setting tool-bar dnd fontset image fringe lisp-mode register page menu-bar rfn-eshadow timer select scroll-bar mldrag mouse jit-lock font-lock syntax facemenu font-core frame cham georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korean japanese hebrew greek romanian slovak czech european ethiopic indian cyrillic chinese case-table epa-hook jka-cmpr-hook help simple abbrev loaddefs button minibuffer faces cus-face files text-properties overlay md5 base64 format env code-pages mule custom widget hashtable-print-readable backquote make-network-process dbusbind system-font-setting font-render-setting gtk x-toolkit x multi-tty emacs) --=20 http://rrt.sc3d.org/ ------------=_1309392961-22259-1--