I want to be able to create a new buffer (and a new window with which to interact with it) to work with secret or sensitive info, e.g. passwords.
Ideally, none of the contents of the buffer would persist after it's closed or discarded. It'd probably be best if the contents are discarded too even when the last window for the buffer is closed. If possible, it'd be best if any in-memory copies of the buffer are 'wiped' when it's closed as well.
The gnupg.vim plugin claims:
The script turns off viminfo and swapfile to increase security.
So doing both seems necessary, tho perhaps not sufficient. What else should I do?
undofile
is off, although it's off by default. Also maybe settingbuftype
tonofile
. These are just some things that come to mind, but security is not my expertise.