Conversation

Notices

1. Sergey Bugaev (bugaevc@floss.social)'s status on Saturday, 24-Dec-2022 02:49:44 JST Sergey Bugaev

   Hm, so I've got an idea for a simple app:

   a pretty Adwaita app for generating reasonably secure passwords (like FY#w20g8y9z$), perhaps with a slider (GtkScale) to pick the length

   basically like those tools you can find online, or like pwgen, but as a pretty app

   this is what I'd myself use quite frequently

   • Adrian Cochrane (alcinnz@floss.social)'s status on Saturday, 24-Dec-2022 02:49:38 JST Adrian Cochrane

     in reply to

     @bugaevc I use the secret service paired with some apps like you described to generate & store my passwords!

   • Sergey Bugaev (bugaevc@floss.social)'s status on Saturday, 24-Dec-2022 02:49:39 JST Sergey Bugaev

     in reply to

     This is such a wasted opportunity though. Like, all they have to do is define some well-known schemas (say, org.freedesktop.WebPassword) and get major browsers to support it; then we'd have automatic cross-browser password sharing,

     and the same schema could also be used by apps that are native clients to web services; for instance a :mastodon: client would just pick up the password you have already saved in your browser

   • Sergey Bugaev (bugaevc@floss.social)'s status on Saturday, 24-Dec-2022 02:49:40 JST Sergey Bugaev

     in reply to

     Overall, the Secret Service seems to be designed to be a solution for apps to store whatever app-specific secrets they need to, and not an interoperable password manager for everything in the system to use.

     So in the light of this, it's unclear exactly what "importing the password into Secret Service" should do.

   • Sergey Bugaev (bugaevc@floss.social)'s status on Saturday, 24-Dec-2022 02:49:41 JST Sergey Bugaev

     in reply to

     ephy uses org.epiphany.FormPassword — not org.gnome.Epiphany.Whatever, which is hilarious because https://epiphany.org/ is... something entirely unrelated, but I guess this is way too late to change now. Other apps use their own things, it seems.

     There's also org.gnome.keyring.Note defined by libsecret itself, which is kind of neutral and documented as being for "note or password stored manually by the user".

   • Sergey Bugaev (bugaevc@floss.social)'s status on Saturday, 24-Dec-2022 02:49:42 JST Sergey Bugaev

     in reply to

     Hm, so reading up on libsecret, you're meant to store secrets with a schema, which technically identifies what key-value attrs are attached to the secret — and logically describes which kind of secret it is. And the schemes are not generic, as in "ssh key" or "password", but rather it would seem that each project is expected to define its own schema (or several) for the kind of secrets it wants to store

   • Sergey Bugaev (bugaevc@floss.social)'s status on Saturday, 24-Dec-2022 02:49:43 JST Sergey Bugaev

     in reply to

     it could then help you import the generated password into the Secret Service

     Adrian Cochrane repeated this.
   • Sergey Bugaev (bugaevc@floss.social)'s status on Saturday, 24-Dec-2022 02:50:29 JST Sergey Bugaev

     in reply to

     • Adrian Cochrane

     @alcinnz oh! Please tell me more

   • Adrian Cochrane (alcinnz@floss.social)'s status on Saturday, 24-Dec-2022 02:52:41 JST Adrian Cochrane

     in reply to

     @bugaevc I use elementary apps called "LockBox" & "LockSmith", which in turn uses GNOME Web's schema.

     https://appcenter.elementary.io/com.github.skarva.lockbox
     https://appcenter.elementary.io/com.github.christophernugent.locksmith

     (Really need to update my OS once I've closed all my tabs...)