Comment 14 for bug 276384

Revision history for this message
otzenpunk (reisswolf-nospam) wrote :

@loke:

NO, IT CAN'T!

Sorry, maybe I'm just too stupid to explain this in a comprehensible way.

Last try:

Authentication and encryption are two fundamental different things. You can't "unlock" an encrypted thing(tm) with a fingerprint. To decrypt an encrypted thing you need to know the secret, which was used to encrypt this thing. (Commonly known as passphrase.) This is not the place to teach the most trivial basics of cryptography, but you could read the last comment by Milan again to learn, why you can't use fingerprints for that.

If you would like to allow pam to do the decryption, you would have to provide pam with the secret, and if you don't want people having to enter this secret manually, then you'd have to save it on disk, which would be equivalent to writing your password with a big marker onto the frame of your monitor. (And no, you can't encrypt the passphrase itself without introducing another secret - hen and egg problem.)

So if you don't mind about effective encryption of your password safe, then use an empty passphrase for your Gnome keyring and go ahead. But please, people, stop filling this bug report over and over with this same crap. Thinkfinger can't open the keyring and most likely won't ever. At least unless it is discovered, that the hardware itself does contain some kind of password store.

Full stop.

*tagging this bug as invalid*