Re: How can I not use text password in my .gnus.el?

[Richard Riley]

Gijs Hillenius <gijs@hillenius.net> writes:

> On 21 Aug 2009, Water Lin wrote:
>
>
>> I use my Emacs Gnus to get emails, but I save the password in
>> .gnus.el as text. I don't think it is safe.
>
> ...
>
>> So I am trying to find a way which can encrypt my text password.
>
> try easypg , read emascwiki on autoencryption
>
> Recently somewhere on the internet someone explained how to use easypg
> to encrypt the .imapauthinfo files -> imapauthinfo.gpg
>
> Can't immediately find the link atm..

I use it combined with gpg-agent. Works very well. Copy the contents of
your .authinfo into the clipboard and then create .authinfo.epg. Emacs
will prompt your for a key or a symmetric password when you save
it. Change your gnus sources lines to use .authinfo.gpg.

Here is my set up example:

(1) gnus select method:

       gnus-select-method '(nnimap "mymail"
                                   (nnimap-stream ssl)
                                   (nnimap-address "imap.mymailserver.net")
                                   (nnimap-authinfo-file "~/.authinfo.gpg")
                                   (nnimap-expunge-on-close always)
                                   (nnimap-nov-is-evil t)
                                   (nnir-search-engine imap))

(2) epg setup

(require 'auth-source)
(require 'epa-file)
(epa-file-enable)
(setq epa-file-cache-passphrase-for-symmetric-encryption t) ;;VERY Important
(if (file-exists-p "~/.authinfo.gpg")
    (setq auth-sources '((:source "~/.authinfo.gpg" :host t :protocol t)))
    (setq auth-sources '((:source "~/.authinfo" :host t :protocol t))))


Looking at that I can probably lose the gpg line in (1).

r.