jaraco / keyrings.alt

MIT License
24 stars 24 forks source link

PlaintextKeyring is perfectly useless for storing any real secrets. #32

Closed cowlinator closed 5 years ago

cowlinator commented 5 years ago

It should therefore be of lower priority than keyring.backends.fail.Keyring, because if there are no other keyrings, it's better to fail at that point.

There's no situation where a user should ever have their passwords written to plaintext files unless they explicitly choose to by writing a config file or by calling the set_keyring() function.

This is a fix for https://github.com/jaraco/keyring/issues/370