Windows相当于OS X钥匙串? [英] Windows equivalent of OS X Keychain?
问题描述
在Windows中，是否存在等效的OS X钥匙串(用于存储用户密码)?我将使用它来保存我的(桌面)软件使用的Web服务的用户密码.
Is there an equivalent of the OS X Keychain, used to store user passwords, in Windows? I would use it to save the user's password for a web service that my (desktop) software uses.
从此相关问题的答案开始(在桌面中保护用户密码应用程序(Rev 2))和大量第三方密码存储工具可用，我认为这样的事情不存在-每次访问Web服务时我都要求输入密码还是只是对其进行混淆存储吗?
From the answers to this related question (Protecting user passwords in desktop applications (Rev 2)) and the multitude of third party password storage tools available, I assume that such a thing doesn't exist-- Am I stuck with either asking for the password each time I access the web service, or just storing it obfuscated?
推荐答案
Windows的传统"等效项是IE(pre IE 7)，Outlook Express和其他一些程序使用的受保护的存储"子系统.我相信它是使用您的登录密码加密的，可以防止某些离线攻击，但是一旦您登录，任何想要读取的程序都可以读取它. (例如，请参见NirSoft的受保护的存储PassView .)
The "traditional" Windows equivalent would be the Protected Storage subsystem, used by IE (pre IE 7), Outlook Express, and a few other programs. I believe it's encrypted with your login password, which prevents some offline attacks, but once you're logged in, any program that wants to can read it. (See, for example, NirSoft's Protected Storage PassView.)
Windows还提供了可能有用的CryptoAPI和数据保护API.同样，我不认为Windows会采取任何措施来防止在同一帐户下运行的进程看到彼此的密码.
Windows also provides the CryptoAPI and Data Protection API that might help. Again, though, I don't think that Windows does anything to prevent processes running under the same account from seeing each other's passwords.
It looks like the book Mechanics of User Identification and Authentication provides more details on all of these.
Eclipse (via its Secure Storage feature) implements something like this, if you're interested in seeing how other software does it.
这篇关于Windows相当于OS X钥匙串?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
