Jason Bassford wrote:
>>Why does everyone hate the salting so much?
>>
>
The intent is good but taking away a person's
> choice about something so personal is simply wrong. (BTW: I don't
> smoke but I do enjoy multigrain bread - just making a point. And,
> yes, to me directory structure and naming on my own hard drive is
> personal. Call me strange.)
Any installed application imposes some constraints on directory
structure, and Mozilla is no exception. Maybe I don't like the fact thet
the Mozilla binary has to be in the same directory as its associated
files (like the chrome directory). Tough turkey - it won't run
otherwise. I don't see how salting is any different.
That said, in light of all the complaints, what I would like to do is
get rid of the salt directory and do the following: Assume that if a
profile name is something other than "default," then it's reasonably
unpredicatble and doesn't need salting. Then, we either disallow the
name "default" or any other default name, or we append some salt to the
directory name "default" or somesuch. The security of this scheme would
be a little weaker than the current one, but still acceptable, I think.
-Mitch
