GildedHonour / OpenVpnManagement

C# OpenVPN interface
https://openvpn.net
Apache License 2.0
53 stars 26 forks source link

Unsecure #1

Closed kyumit closed 5 years ago

kyumit commented 7 years ago

It is nice to see how the Management Interface works, but your solution is very unsecure. Yes the password will send without encryption over the socket connection, but why you write the username/password in the temp directory? You never remove this file from temp, so everyone can see it. There are better approaches I think.

ghost commented 7 years ago

@mitja-bochmann @GildedHonour Any suggestions on improving this?