> 4) Still not sure what to do with passwords. Encrypting would
be
nice, but that needs to be a two way encrypt with a private key. Where
to store the private key… I don't know. Maybe we can simply store
plain passwords for now and warn the user about this. How do they
solve this in JBoss Tools for example?
Eclipse provides a secure storage API which is where we store things
like passwords separately.
Out of curiosity, do you know how key management (for encryption) is done for the secure
storage API?