Comment 1 for bug 388593

Revision history for this message
Martin Pitt (pitti) wrote :

FWIW, this is not a papercut, but requires some careful planning and upstream work. This doesn't happen if you log in through gdm normally, since then the keyring will be unlocked with your passphrase. If you use autologin, there are just two options:

 - asking for your passphrase to unlock the keyring
 - storing all your passwords unencrypted on your hard disk

I don't particularly like the second option, since the keyring also stores email/ICQ/etc. passwords, all your web passwords if you use epiphany, ssh passphrases, etc. We shouldn't just silently keep an unencrypted keyring and hide the potential vulnerability of this to the user.

What we could theoretically do is to not use gnome-keyring in network-manager-applet if it is locked, and instead store the plaintext WPA/WEP passphrase in network-manager itself. I'm less concerned about Wifi passwords than for SSH/web/email passwords; we need to treat those with care!