Why does Bolt (Runescape Launcher) request KDE wallet access?
Whenever I open the third party Runescape launcher Bolt, it requests KDE wallet access. I don't give it access, and everyone says it's a reliable app. Is it just behaving oddly?
View original on lemmy.world
encryption. i dont know anything about the launcher but anything requiring encryption pops it up for me.
thanks, could you happen to explain a bit more? for example, what does the runescape client have to do with encryption? in case i don't want anyone else to be able to access my runescape account that's logged into the bolt client?
Just a guess, but is it saving your RuneScape account information in your KDE wallet?
Or the key to decrypt the account information, more likely. Right?
That is certainly possible, but I think the usual flow is for KDE wallet to handle the actual security stuff and the application just gets the credentials
Cool. I know mine stores my SMB credentials for my NAS, and Signal seems to store the key to decrypt the database at rest. When looking in at the values, its usually the bare minimum. I am far from well-read on it though.
KDE Wallet is primarily a password manager. So if the launcher saves your password this is probably where it is storing it. Why invent your own storage when you can use one that is already built? For more information I recommend the ArchWiki which has plenty of information that is not arch specific. Also if you use Gnome I would imagine it would access Gnome keyring which serves the same function. KDE Wallet
I think this is a new feature as it used to store your account tokens as plaintext, no encryption. So it might be something new.
KDE wallet is the storage for encryption keys. All apps that uses encryption or certificates should ideally use the os storage.