>
> On Jun 15, 2005, at 6:51 PM, Benjamin Swanson wrote:
>> i've read throught the widget documentation on Apple's dev site and
>> searched through the net a little, and I can't find anywhere that
>> tells *how* or *where* these preferences are stored. Are they
>> secure? are they just some text file somewhere?
>
> They are saved as plain text, so there is no security.
> widget.preferenceForKey() and widget.setPreferenceForKey() utilize
> the same defaults system applications useĀmeaning that the prefs are
> saved in ~/Library/Preferences/, as XML files (use the Property List
> Editor application in /Developer/Applications/Utilities/ to read
> these). It's good to know that for debugging purposes, but you
> shouldn't rely on that path in any way within your widget, in case
> something were to change in the preferences system somewhere down the
> line. Stick to the APIs and you'll be in good shape.
>
Note that preferences on Tiger are stored in a binary plist not plain text.
Still no real security though.
>> If I am developing a widget, should I trust that those methods
>> store users' passwords in a secure place? Or should I look into
>> some other method of storing them (say using Applescript to access
>> the keychain...)
>
> If you're saving a password and therefore concerned about security, I
> would recommend that you write a widget plug-in that works with
> Keychain to store and retrieve passwords.
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Dashboard-dev mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
> http://lists.apple.com/mailman/options/dashboard-dev/email@hidden
>
> This email sent to email@hidden
--------------------------------------------------
John Louch Internet #: email@hidden
(805) 541 2965
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Dashboard-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/dashboard-dev/email@hidden
This email sent to email@hidden
