ONLY THE OWNING USER CAN DECRYPT THE FILE.
NOONE ELSE CAN.
Sorry for shouting, but...
Just try it, for the love of god !
;-)
________________________________
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Venkatasamy,Venkat
Sent: Monday, March 17, 2008 2:52 PM
To: David Balazic; Peter Robev
Cc: [email protected]
Subject: RE: Password encryption
The helpdesk support team will have local admin access in all
the computers. The members will be able to access the profile folders
for all users. In this case, I belive this is a not a secure solution.
________________________________
From: David Balazic [mailto:[EMAIL PROTECTED]
Sent: Monday, March 17, 2008 9:49 AM
To: Venkatasamy,Venkat; Peter Robev
Cc: [email protected]
Subject: RE: Password encryption
Of course.
YOU can read it.. Noone else can.
________________________________
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Venkatasamy,Venkat
Sent: Monday, March 17, 2008 2:35 PM
To: David Balazic; Peter Robev
Cc: [email protected]
Subject: RE: Password encryption
I tried encrypting the .purple folder and tested saving
my password in the IM client. When I opened the accounts.xml I found my
password uncrypted.
________________________________
From: David Balazic
[mailto:[EMAIL PROTECTED]
Sent: Monday, March 17, 2008 9:32 AM
To: Venkatasamy,Venkat; Peter Robev
Cc: [email protected]
Subject: RE: Password encryption
It _IS_ secure. This is not some "I wrote it during the
weekend" encryption.
It is real, tried and tested encryption.
David
________________________________
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Venkatasamy,Venkat
Sent: Monday, March 17, 2008 12:57 PM
To: Peter Robev; David Balazic
Cc: [email protected]
Subject: RE: Password encryption
This is not going to help to solve the issue. I
belive David refers to encrypting the .purple directory. But local
administrators of the computer will be able to decrypt the folder and
access the password. This is not a secure workaround.
i would like to hash the password so it should
not be visible even to the user who stores the password.
________________________________
From: Peter Robev [mailto:[EMAIL PROTECTED]
Sent: Saturday, March 15, 2008 9:55 AM
To: David Balazic
Cc: Venkatasamy,Venkat; [email protected]
Subject: Re: Password encryption
??????????????
Where do you see that ???
2008/3/15 David Balazic
<[EMAIL PROTECTED]>:
File(Directory) Properties / Advanced
... / Encrypt contents to secure data
________________________________
From: [EMAIL PROTECTED] on
behalf of Venkatasamy,Venkat
Sent: Fri 14-Mar-08 17:54
To: [email protected]
Subject: Password encryption
We came to know that Pidgin does not
encrypt the users' password when
they choose "Remember Password" options
in the accounts windows.
Is there any workaround for this as this
will be security issue in any
organization as local administrators
having access to the .purple
folder.
Thanks
Venkat
CONFIDENTIALITY STATEMENT
This communication and any attachments
are CONFIDENTIAL and may
be protected by one or more legal
privileges. It is intended
solely for the use of the addressee
identified above. If you
are not the intended recipient, any use,
disclosure, copying
or distribution of this communication is
UNAUTHORIZED. Neither
this information block, the typed name
of the sender, nor
anything else in this message is
intended to constitute an
electronic signature unless a specific
statement to the
contrary is included in this message. If
you have received this
communication in error, please
immediately contact me and delete
this communication from your computer.
Thank you.
_______________________________________________
Support mailing list
[email protected]
http://pidgin.im/cgi-bin/mailman/listinfo/support
_______________________________________________
Support mailing list
[email protected]
http://pidgin.im/cgi-bin/mailman/listinfo/support
________________________________
CONFIDENTIALITY STATEMENT
This communication and any attachments are
CONFIDENTIAL and may be protected by one or more legal privileges. It is
intended solely for the use of the addressee identified above. If you
are not the intended recipient, any use, disclosure, copying or
distribution of this communication is UNAUTHORIZED. Neither this
information block, the typed name of the sender, nor anything else in
this message is intended to constitute an electronic signature unless a
specific statement to the contrary is included in this message. If you
have received this communication in error, please immediately contact me
and delete this communication from your computer. Thank you.
________________________________
________________________________
CONFIDENTIALITY STATEMENT
This communication and any attachments are CONFIDENTIAL
and may be protected by one or more legal privileges. It is intended
solely for the use of the addressee identified above. If you are not the
intended recipient, any use, disclosure, copying or distribution of this
communication is UNAUTHORIZED. Neither this information block, the typed
name of the sender, nor anything else in this message is intended to
constitute an electronic signature unless a specific statement to the
contrary is included in this message. If you have received this
communication in error, please immediately contact me and delete this
communication from your computer. Thank you.
________________________________
________________________________
CONFIDENTIALITY STATEMENT
This communication and any attachments are CONFIDENTIAL and may
be protected by one or more legal privileges. It is intended solely for
the use of the addressee identified above. If you are not the intended
recipient, any use, disclosure, copying or distribution of this
communication is UNAUTHORIZED. Neither this information block, the typed
name of the sender, nor anything else in this message is intended to
constitute an electronic signature unless a specific statement to the
contrary is included in this message. If you have received this
communication in error, please immediately contact me and delete this
communication from your computer. Thank you.
________________________________
_______________________________________________
Support mailing list
[email protected]
http://pidgin.im/cgi-bin/mailman/listinfo/support
