New submission from Thomas Grainger:

Having the password stored in a plain-text configuration file is not great 
security.

A better choice would be to try to use the OS keyring and then fall back to a 
plaintext file

An example implementation of a generic keyring python interface is available 
at: http://pypi.python.org/pypi/keyring/

----------
assignee: eric.araujo
components: Distutils2
messages: 181052
nosy: alexis, eric.araujo, graingert, tarek
priority: normal
severity: normal
status: open
title: the system keyring should be used instead of ~/.pypirc
type: security

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue17096>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to