search

LeastAuthority / winden

Winden is a free web application for secure, fast, and easy file transfers between devices in real-time
MIT License
55 stars 4 forks source link

Credentials sharing capability #166

Open donpui opened 1 year ago

donpui commented 1 year ago

It would be nice to see password or credentials sharing option in Winden. For example, it would be possible to input password or small text and share it with the link or code. To make it more secure, it could support second factor, additional PIN code to unlock text.

There is a good use case, as SaaS companies usually need to share API key or other credentials related information with there customers.

Partly it could be done now, but it requires to put in file and other side also receives files. From UX, it requires few more steps. From security, it is additional copy of credentials saved on disk, which may have additional risks.

meejah commented 1 year ago

This is what the "text messages" in the existing protocol can be used for. However, Winden doesn't implement that part of the protocol, so that would be a starting point. (I'm not sure if the underlying library implements this part or not).

The Python client does implement it, so could test against that.