Comment 7 for bug 1387303

Revision history for this message
Pascal de Bruijn (pmjdebruijn) wrote :

This issue isn't about whether gnome-keyring is useful or not.

But there are indeed many reasons for not wanting to use it for anything but secret store indeed, some as listed by Dmitri.

The fact that gnome-keyring doesn't implement some of these features is rather inherent to the process, where either SSH or GPG need to advance, before GNOME is in a position to follow them. Resulting in natural "lag". The fact that GNOME Keyring is only a small part of GNOME doesn't make it any better with regard to prioritization.

The fact that GNOME (Keyring) is a usability focused project is indeed a valid reason to prefer the real ssh-agent or gpg-agent as they are security focussed projects and presumably should be more trustworthy.

As for the remark about pkcs10, I'm not sure that actually being used by anything. The main use-case for it seems to be Firefox/Thunderbird which use NSS, which doesn't seem to be hooked up to GNOME Keyring's PKCS10 component by default.

Regardless of defaults, if I understand well, the following will revert to the old behavior:
echo manual > /etc/xdg/upstart/gnome-keyring.override

Allowing any user to disable to individual services like so:
echo 'X-GNOME-Autostart-enabled=false' >> /etc/xdg/autostart/gnome-keyring-gpg.desktop
echo 'X-GNOME-Autostart-enabled=false' >> /etc/xdg/autostart/gnome-keyring-ssh.desktop
echo 'X-GNOME-Autostart-enabled=false' >> /etc/xdg/autostart/gnome-keyring-pkcs10.desktop