The helpdesk support team will have local admin access in all the computers. The members will be able to access the profile folders for all users. In this case, I belive this is a not a secure solution.
________________________________ From: David Balazic [mailto:[EMAIL PROTECTED] Sent: Monday, March 17, 2008 9:49 AM To: Venkatasamy,Venkat; Peter Robev Cc: [email protected] Subject: RE: Password encryption Of course. YOU can read it.. Noone else can. ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Venkatasamy,Venkat Sent: Monday, March 17, 2008 2:35 PM To: David Balazic; Peter Robev Cc: [email protected] Subject: RE: Password encryption I tried encrypting the .purple folder and tested saving my password in the IM client. When I opened the accounts.xml I found my password uncrypted. ________________________________ From: David Balazic [mailto:[EMAIL PROTECTED] Sent: Monday, March 17, 2008 9:32 AM To: Venkatasamy,Venkat; Peter Robev Cc: [email protected] Subject: RE: Password encryption It _IS_ secure. This is not some "I wrote it during the weekend" encryption. It is real, tried and tested encryption. David ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Venkatasamy,Venkat Sent: Monday, March 17, 2008 12:57 PM To: Peter Robev; David Balazic Cc: [email protected] Subject: RE: Password encryption This is not going to help to solve the issue. I belive David refers to encrypting the .purple directory. But local administrators of the computer will be able to decrypt the folder and access the password. This is not a secure workaround. i would like to hash the password so it should not be visible even to the user who stores the password. ________________________________ From: Peter Robev [mailto:[EMAIL PROTECTED] Sent: Saturday, March 15, 2008 9:55 AM To: David Balazic Cc: Venkatasamy,Venkat; [email protected] Subject: Re: Password encryption ?????????????? Where do you see that ??? 2008/3/15 David Balazic <[EMAIL PROTECTED]>: File(Directory) Properties / Advanced ... / Encrypt contents to secure data ________________________________ From: [EMAIL PROTECTED] on behalf of Venkatasamy,Venkat Sent: Fri 14-Mar-08 17:54 To: [email protected] Subject: Password encryption We came to know that Pidgin does not encrypt the users' password when they choose "Remember Password" options in the accounts windows. Is there any workaround for this as this will be security issue in any organization as local administrators having access to the .purple folder. Thanks Venkat CONFIDENTIALITY STATEMENT This communication and any attachments are CONFIDENTIAL and may be protected by one or more legal privileges. It is intended solely for the use of the addressee identified above. If you are not the intended recipient, any use, disclosure, copying or distribution of this communication is UNAUTHORIZED. Neither this information block, the typed name of the sender, nor anything else in this message is intended to constitute an electronic signature unless a specific statement to the contrary is included in this message. If you have received this communication in error, please immediately contact me and delete this communication from your computer. Thank you. _______________________________________________ Support mailing list [email protected] http://pidgin.im/cgi-bin/mailman/listinfo/support _______________________________________________ Support mailing list [email protected] http://pidgin.im/cgi-bin/mailman/listinfo/support ________________________________ CONFIDENTIALITY STATEMENT This communication and any attachments are CONFIDENTIAL and may be protected by one or more legal privileges. It is intended solely for the use of the addressee identified above. If you are not the intended recipient, any use, disclosure, copying or distribution of this communication is UNAUTHORIZED. Neither this information block, the typed name of the sender, nor anything else in this message is intended to constitute an electronic signature unless a specific statement to the contrary is included in this message. If you have received this communication in error, please immediately contact me and delete this communication from your computer. Thank you. ________________________________ ________________________________ CONFIDENTIALITY STATEMENT This communication and any attachments are CONFIDENTIAL and may be protected by one or more legal privileges. It is intended solely for the use of the addressee identified above. If you are not the intended recipient, any use, disclosure, copying or distribution of this communication is UNAUTHORIZED. Neither this information block, the typed name of the sender, nor anything else in this message is intended to constitute an electronic signature unless a specific statement to the contrary is included in this message. If you have received this communication in error, please immediately contact me and delete this communication from your computer. Thank you. ________________________________ CONFIDENTIALITY STATEMENT This communication and any attachments are CONFIDENTIAL and may be protected by one or more legal privileges. It is intended solely for the use of the addressee identified above. If you are not the intended recipient, any use, disclosure, copying or distribution of this communication is UNAUTHORIZED. Neither this information block, the typed name of the sender, nor anything else in this message is intended to constitute an electronic signature unless a specific statement to the contrary is included in this message. If you have received this communication in error, please immediately contact me and delete this communication from your computer. Thank you.
_______________________________________________ Support mailing list [email protected] http://pidgin.im/cgi-bin/mailman/listinfo/support
