[forge-dev] Configuration API

Max Rydahl Andersen max.andersen at redhat.com
Wed Dec 21 05:11:18 EST 2011


>>> 4) Still not sure what to do with passwords. Encrypting would be
>> nice, but that needs to be a two way encrypt with a private key. Where
>> to store the private key… I don't know. Maybe we can simply store
>> plain passwords for now and warn the user about this. How do they
>> solve this in JBoss Tools for example? 
>> 
>> Eclipse provides a secure storage API which is where we store things
>> like passwords separately.
> 
> Out of curiosity, do you know how key management (for encryption) is done for the secure storage API?

it uses the OS specific secure storage where available or whatever else secure storage API is hooked in.

More info at http://help.eclipse.org/indigo/index.jsp?topic=%2Forg.eclipse.platform.doc.user%2Freference%2Fref-securestorage-start.htm

/max
http://about.me/maxandersen






More information about the forge-dev mailing list