From pgilbert902 at gmail.com  Sun Dec 18 02:28:20 2011
From: pgilbert902 at gmail.com (Paul Gilbert)
Date: Sat, 17 Dec 2011 20:28:20 -0500
Subject: [Rd] secure password token management method in R
In-Reply-To: <CABSPzu7phFMjkXEt1RvEs8Z64ntTbDyNqmmayz1F3uNL+kOkHA@mail.gmail.com>
References: <CABSPzu7phFMjkXEt1RvEs8Z64ntTbDyNqmmayz1F3uNL+kOkHA@mail.gmail.com>
Message-ID: <4EED41B4.1000009@gmail.com>

One way this is often done is to have this information in a file that 
only the owner can read. For example, mysql uses a file .my.cnf (in 
Windows it may have a different name). The code then just reads the 
information from the file. To guard against user carelessness, I think 
mysql will not use it if anyone other than the user has read permission 
on the file. Of the various options for passing user/password 
information, I think this is general considered one of the better ways.

Paul

On 11-12-14 04:54 PM, Ni Wang wrote:
> hi, r developers, I am now working on a R function/package to handling
> online request with username and token/password.
>
> For security reasons, it's not so safe to store the username&  token in
> persistent variables, since they'll be saved to disk when
> users save their workspace. Is there a secure way in R to handle the online
> password management? I have searched it online
> but didn't find any good suggestions. So I am trying my luck on this mail
> list.
>
> Regards
>
> Ni
>
> 	[[alternative HTML version deleted]]
>
> ______________________________________________
> R-devel at r-project.org mailing list
> https://stat.ethz.ch/mailman/listinfo/r-devel



[Rd] secure password token management method in R
Paul Gilbert