Bug 333137 - kwallet first run wizard shouldn't ask between gpg and blowfish
Summary: kwallet first run wizard shouldn't ask between gpg and blowfish
Status: CONFIRMED
Alias: None
Product: kwalletmanager
Classification: Applications
Component: general (show other bugs)
Version: unspecified
Platform: Kubuntu Linux
: VHI normal
Target Milestone: ---
Assignee: Valentin Rusu
URL:
Keywords: usability
: 413314 (view as bug list)
Depends on:
Blocks:
 
Reported: 2014-04-06 23:00 UTC by Davide Bettio
Modified: 2022-09-06 10:00 UTC (History)
7 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Davide Bettio 2014-04-06 23:00:25 UTC
I don't think asking user about which encryption method between blowfish and gpg should be used is a good idea. I think that the best compromise between security and easy to use should be already the default for every user. More advaced settings should be displayed using an "Advanced" button while asking the password.


Reproducible: Always

Steps to Reproduce:
First run wizard
Comment 1 Nate Graham 2018-01-17 19:32:13 UTC
Agreed. This is a pretty user-hostile UI that demands a level of technical knowledge that it's not reasonable to expect of every user. I'll see if I can work up a patch at some point soon.
Comment 2 Andres Betts 2018-04-02 19:15:59 UTC
This is a good example where we can apply the "powerful when needed" idea. Maybe we offer the user to configure more advanced settings through the wizard but allow the user to only do a couple of clicks and be up and running with the wallet.
Comment 3 Rex Dieter 2018-04-02 19:28:29 UTC
Fwiw, if using kwallet-pam, user isn't asked (it's setup automatically... to use blowfish + login password)
Comment 4 Nate Graham 2018-04-02 19:29:36 UTC
Right; many user-friendly distros like Kubuntu set this up automatically. The bug mostly affects people who use distros like Arch.
Comment 5 Rex Dieter 2018-04-02 19:57:08 UTC
OK, I was just pointing out a solution already exists.  you've highlighted that some simply choose not use it.
Comment 6 Nate Graham 2018-04-02 19:59:38 UTC
Some distros, yes. We should improve this for the benefit of those distros' users.
Comment 7 michaelk83 2022-09-06 09:57:04 UTC
*** Bug 413314 has been marked as a duplicate of this bug. ***
Comment 8 michaelk83 2022-09-06 10:00:07 UTC
(In reply to Rex Dieter from comment #3)
> Fwiw, if using kwallet-pam, user isn't asked (it's setup automatically... to
> use blowfish + login password)
kwallet-pam doesn't support GPG wallets, I think, so there's no choice there.