https://bugs.kde.org/show_bug.cgi?id=156547

--- Comment #11 from michaelk83 <mk.mat...@gmail.com> ---
As discussed in the MR (
https://invent.kde.org/utilities/kwalletmanager/-/merge_requests/46#note_1146725
), there are two parts to this:
1. On KWallet's side, it absolutely *should* tell Klipper that "this is a
password", so that Klipper can tell that it's sensitive.
2. On Klipper's end, it's up to Klipper to decide what to do with that
information, such as:
    - Hide it / not hide it / use asterisks / etc.
    - Avoid saving it to its history list, or worse, to disk.
    - Delete it (or not) after some timeout.

Preventing plaint-text passwords from ending up on disk, or even staying in
memory longer than necessary, is not just a "false sense of security". But
that's up to Klipper.

This bug report is for the KWallet side, and was RESOLVED FIXED with the above
MR. For changes to Klipper's behavior, please file a separate issue, if one
hasn't been filed yet.

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to