Encrypt User Password at Rest about nicotine-plus HOT 4 OPEN

hashlib would likely be the pure python solution.

from nicotine-plus.

We can't change the Soulseek protocol or server, so hashing wouldn't be possible. The best we could do is store the password in the system keyring.

from nicotine-plus.

We can't change the Soulseek protocol or server, so hashing wouldn't be possible. The best we could do is store the password in the system keyring.

I suppose what I meant was hash it for local storage, then decrypt the hash before authorizing with the server.

To your point though, keyring seems like it could be a more elegant solution.

from nicotine-plus.

Even if you store it securely on the system, the password will be transmitted unencrypted over the network as soon as you log in. If you don't trust your local admin, you shouldn't use the system.

from nicotine-plus.