[Users] [Bug 2828] Use MD5 digest for socket name

[Rich Pieri]

On Fri, 30 Nov 2012 01:00:22 +0100
Holger Berndt <berndth at gmx.de> wrote:

> If it's to be per-user, it should just use XDG_RUNTIME_DIR.

XDG_RUNTIME_DIR is not defined unless you are running an XDG-compliant
desktop on the host where Claws Mail is running. Examples where
XDG_RUNTIME_DIR is not defined include: Macintosh, Windows, and using
"ssh -Y" to log into a remote server.


> But anyways, it's a matter of preference what's more valuable: Safety
> against different uids trying to mess with the same config dir at the
> same time, or DoS prevention. Personally, I lean towards the second.

This is not a matter of preference. Losing mail is the worst possible
event. Anything that results in lost mail is incorrect behavior and
must be avoided. There are no exceptions to this rule.

-- 
Rich P.