[vlc-devel] [RFC] Memory keystore

Jean-Baptiste Kempf jb at videolan.org
Tue Feb 9 00:35:00 CET 2016


On 08 Feb, typx wrote :
> On 2016-02-05 20:56, Jean-Baptiste Kempf wrote:
> >On 05 Feb, Rémi Denis-Courmont wrote :
> >>I would remove the file I/O support altogether.
> >
> >Why? How do you do on OS that do not have a Wallet API?
> >
> >With my kindest regards,
> 
> Well in any case clearkeys shouldn't be an option. Without Wallet API you
> can still cipher the data but then how would you store the keys to decipher
> it. The main issue being that the code is readable so it's not like we can
> obfuscate anything.
> 
> Honestly, to me, you shouldn't allow to store secrets when there are no
> wallet-like APIs.

*cough* android *cough*, Windows...

With my kindest regards,

-- 
Jean-Baptiste Kempf
http://www.jbkempf.com/ - +33 672 704 734
Sent from my Electronic Device


More information about the vlc-devel mailing list