Re: Storing sensitive data indefinitely in variables or buffers: Whether and how to fix?

[Jens Schmidt]

On 2023-06-01  08:42, Ihor Radchenko wrote:

> AFAIK, Adam had a very hard time dealing with auth-source.el. See the
> reddit link in his message.

Did that.  However, it is my understanding that auth-source is an
abstraction for credential retrieving (".netrc 3.0"), while plstore is a
generic persistence library.  I'm targeting plstore.

> AFAIR, part of the problem was (1) poor documentation; (2) various 
> edge cases that had to be considered; (3) complex code required to 
> make things work. So, here he is asking for a _simple_ API that does 
> not require too much of tinkering with the internals. If such API is 
> added to plstore, it will certainly be great.

The API is available and IMHO sufficiently simple, but issues (1) and
(2) are surely present in plstore.  Plus it does not handle expiry in
any way.  Will do my best to do something about all these, keeping the
results of this thread in mind.