I have a hard time understanding the benefits of the keyring (e.g. GNOME keyring). I get the convenience parts - I don’t have to enter password for something every time I want to use it (e.g. mounted encrypted drive) and I don’t have to create a secret for some background stuff (applications keys). But the problem is, if I understand it correctly, that every application has the same access to my keyring, so, in theory, a malicious application can just read my Signal key and they can just read all my Signal messages right? Is there a point, then, in encrypting e.g. local database (like Signal) if the key to that database is readily available anyway? Any input is welcome. thanks!

  • atzanteol@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    3
    ·
    7 hours ago

    KDE requires giving permissions to an app that wants to access kwallet also. I’m sure gnome does something similar.

    • dieTasse@feddit.orgOP
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      4 hours ago

      Giving permission from the user? That would be points for KDE actually. On GNOME I have never been asked, so I doubt it has it.

      • atzanteol@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        3
        ·
        3 hours ago

        Yeah - I’ve been asked “application nextcloud wants to access wallet kdewallet” or something. I think it remembers the app for future requests though.