Password encryption

[Venkatasamy,Venkat]

I tried encrypting the .purple folder and tested saving my password in
the IM client. When I opened the accounts.xml I found my password
uncrypted.

________________________________

From: David Balazic [mailto:David.Balazic at hermes-softlab.com] 
Sent: Monday, March 17, 2008 9:32 AM
To: Venkatasamy,Venkat; Peter Robev
Cc: support at pidgin.im
Subject: RE: Password encryption


It _IS_ secure. This is not some "I wrote it during the weekend"
encryption.
It is real, tried and tested encryption.
 
David


________________________________

	From: support-bounces at pidgin.im
[mailto:support-bounces at pidgin.im] On Behalf Of Venkatasamy,Venkat
	Sent: Monday, March 17, 2008 12:57 PM
	To: Peter Robev; David Balazic
	Cc: support at pidgin.im
	Subject: RE: Password encryption
	
	
	This is not going to help to solve the issue. I belive David
refers to encrypting the .purple directory. But local administrators of
the computer will be able to decrypt the folder and access the password.
This is not a secure workaround.
	 
	i would like to hash the password so it should not be visible
even to the user who stores the password.

________________________________

	From: Peter Robev [mailto:probev at gmail.com] 
	Sent: Saturday, March 15, 2008 9:55 AM
	To: David Balazic
	Cc: Venkatasamy,Venkat; support at pidgin.im
	Subject: Re: Password encryption
	
	
	??????????????
	 
	Where do you see that ???
	
	
	2008/3/15 David Balazic <David.Balazic at hermes-softlab.com>:
	

		File(Directory) Properties / Advanced ... / Encrypt
contents to secure data

________________________________

		From: support-bounces at pidgin.im on behalf of
Venkatasamy,Venkat
		Sent: Fri 14-Mar-08 17:54
		To: support at pidgin.im
		Subject: Password encryption
		
		

		
		We came to know that Pidgin does not encrypt the users'
password when
		they choose "Remember Password" options in the accounts
windows.
		
		Is there any workaround for this as this will be
security issue in any
		organization as local administrators having access to
the .purple
		folder.
		
		Thanks
		Venkat
		
		
		
		
		CONFIDENTIALITY STATEMENT
		This communication and any attachments are CONFIDENTIAL
and may
		be protected by one or more legal privileges. It is
intended
		solely for the use of the addressee identified above. If
you
		are not the intended recipient, any use, disclosure,
copying
		or distribution of this communication is UNAUTHORIZED.
Neither
		this information block, the typed name of the sender,
nor
		anything else in this message is intended to constitute
an
		electronic signature unless a specific statement to the
		contrary is included in this message. If you have
received this
		communication in error, please immediately contact me
and delete
		this communication from your computer. Thank you.
		
		_______________________________________________
		Support mailing list
		Support at pidgin.im
		http://pidgin.im/cgi-bin/mailman/listinfo/support
		


		_______________________________________________
		Support mailing list
		Support at pidgin.im
		http://pidgin.im/cgi-bin/mailman/listinfo/support
		
		


	
________________________________


	

	CONFIDENTIALITY STATEMENT
	This communication and any attachments are CONFIDENTIAL and may
be protected by one or more legal privileges. It is intended solely for
the use of the addressee identified above. If you are not the intended
recipient, any use, disclosure, copying or distribution of this
communication is UNAUTHORIZED. Neither this information block, the typed
name of the sender, nor anything else in this message is intended to
constitute an electronic signature unless a specific statement to the
contrary is included in this message. If you have received this
communication in error, please immediately contact me and delete this
communication from your computer. Thank you. 

	
________________________________


	


CONFIDENTIALITY STATEMENT
This communication and any attachments are CONFIDENTIAL and may
be protected by one or more legal privileges. It is intended
solely for the use of the addressee identified above. If you
are not the intended recipient, any use, disclosure, copying
or distribution of this communication is UNAUTHORIZED. Neither
this information block, the typed name of the sender, nor
anything else in this message is intended to constitute an
electronic signature unless a specific statement to the
contrary is included in this message. If you have received this
communication in error, please immediately contact me and delete
this communication from your computer. Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://pidgin.im/pipermail/support/attachments/20080317/8e62acf3/attachment.html>