Summary: | Gripe with Kwallet Password Management | ||
---|---|---|---|
Product: | [Applications] kwalletmanager | Reporter: | nekonexus |
Component: | general | Assignee: | Valentin Rusu <valir> |
Status: | REPORTED --- | ||
Severity: | normal | CC: | mk.mateng, sam |
Priority: | NOR | Keywords: | needs_verification, usability |
Version: | 22.08.1 | ||
Target Milestone: | --- | ||
Platform: | Arch Linux | ||
OS: | Linux | ||
See Also: | https://bugs.kde.org/show_bug.cgi?id=458318 | ||
Latest Commit: | Version Fixed In: | ||
Sentry Crash Report: |
Description
nekonexus
2022-09-13 02:54:29 UTC
For clarification, for anyone potentially investigating this, KeePassXC does support native themeing like Plasma does as an optional setting (though this isn't the default behavior). AFAIK, KWallet has suffered from a shortage of developer time for many years. It is indeed outdated, and not likely to be vastly improved any time soon. The overall direction for Linux is to switch to Sercret Service, and kwalletd5 has very recently received its own Secret Service API support. This now creates a common interface between the different secret storage backends, client applications, and manager applicatons, so different backends become interchangeable, and different managers become interchangeable. Instead of a manager specific to kwalletd5, you would have a manager for Sercet Service, and it would be able to talk to any of the Sercret Service backends. Right now, there is Gnome's Seahorse, which can now talk to kwalletd5 as well. There's no KDE-native equivalent yet, that I'm aware of. But there is now both the ability and justification to develop one. (There is also KeePassXC's own UI, but that can only talk to KeePassXC.) As the migration to Secret Service matures, eventually, the old KWallet API can be deprecated (Bug 458318), and at that point, either KWalletManager will need to be ported to Secret Service as well, or it will need to be replaced by a new Secret Service manager. I agree that an official KDE fork of KeePassXC is also an interesting idea. In the mean time, if you encounter a KDE app that doesn't support Secret Service yet, encourage its maintainers to switch to QtKeyChain, or at least to libsecert. The former is preferred. It supports both Secret Service and the old KWallet API. As for your concerns with KeePassXC, you can try raising those with KeePassXC's developers (but do search for existing issues first). There seems to be a three year-old existing issue about supporting Kwallet over there, so I referenced this issue and that suggestion you mentioned: https://github.com/keepassxreboot/keepassxc/issues/3679 Lmao As soon as I mentioned what I suggested here about a KDE KeePassXC, I already got a negative reaction from one of their devs: https://github.com/keepassxreboot/keepassxc/issues/3679#issuecomment-1246043235 (In reply to michaelk83 from comment #2) > As for your concerns with KeePassXC, you can try raising those with > KeePassXC's developers (but do search for existing issues first). What I meant was if you have some specific improvements in mind, such as for the authentication prompts: > Kwallet does a better job at requesting for authentication for desktop applications than KeePassXC; > kwalletd5 is just better than the KeePassXC secrets integration and matches the system theme better; Note though that KWallet actually does a very poor job at asking for authentication, since it has no code to identify which app is trying to access KWallet (Bug 451039). KeePassXC is much better on that front. Also, if you're using a GPG wallet, the passphrase request isn't even done by KWallet at all - it's done by GPG. |