Re: bug#58985: 29.0.50; Have auth-source-pass behave more like other back ends

Akib Azmain Turja <[email protected]> Thu, 10 Nov 2022 13:12:56 +0600

Newsgroups	gmane.emacs.erc.general,gmane.emacs.bugs
Message-ID	<[email protected]>

Akib Azmain Turja via "Bug reports for GNU Emacs, the Swiss army knife
of text editors" <[email protected]> writes:

> Michael Albinus <[email protected]> writes:
>
>> "J.P." <[email protected]> writes:
>>
>> Hi,
>>
>>> v2. Respect existing user option.
>>
>> I'm not familiar with the auth-source-pass.el implementation, so I
>> cannot speak too much about your patch. Reading it roughly, I haven't
>> found serious flaws, 'tho.
>
> It has a serious flaw AFAIK.  I have a password entry
> "[email protected]", and this legitimate search query doesn't find it:
>
> (auth-source-search :host "disroot.org")
>
> But if specify the user, it finds the entry:
>
> (auth-source-search :host "disroot.org" :user "akib")
>
> And the entries can also be ambiguous.  For example, the entry at path
> "foo.org/bar.net" might be interpreted as the password of bar.net, or
> as the password of the user "bar.net" on "foo.org".  The current
> implementation seems to interpret such entries unpredictably.
>

I mean, the current implementation, not the patch.

-- 
Akib Azmain Turja --- https://akib.codeberg.page/
GPG key: 70018CE5819F17A3BBA666AFE74F0EFA922AE7F5
Fediverse: [email protected], Codeberg: akib
emailselfdefense.fsf.org | "Nothing can be secure without encryption."

signature.asc (application/pgp-signature, 832 B)