On Mon, 2006-10-23 at 03:07 -0400, Stephanie Erin Daugherty wrote:
> Package: gaim
> Version: 1:2.0.0+beta4-1
> Severity: normal
> 
> Application stores passwords insecurely in ~/.gaim/accounts.xml

This is addressed in the Gaim FAQ, specifically:
http://gaim.sourceforge.net/plaintextpasswords.php

> Application should either:
> 
> 1) Encrypt files containing sensitive data with a passphrase.
> 2) Use a "keychain" or "wallet" service to store passwords if it's available.
> 3) Not offer option of password storage.

I personally wouldn't object to having a way to (optionally) store
passwords in the GNOME keyring, but this is hardly a bug.

Richard

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to