In message <b0459d5c0510171110l1d3b80fci97a581bcd33e6f70@mail.gmail.com>, matth
ew sporleder writes:
>Aren't there a lot of existing "Keychain" (os x has one, and I think
>redhat does too) applications that hold all sorts of things in a
>daemon?  Is this any safer than a library which can access a protected
>database of some type?

It may be safer, but an awful lot depends on the details of the 
interface and the implementation.

		--Steven M. Bellovin, http://www.cs.columbia.edu/~smb