Small security concern: hide password length?

Versent / saml2aws

CLI tool which enables you to login and retrieve AWS temporary credentials using a SAML IDP

https://github.com/Versent/saml2aws

MIT License

2.07k stars 563 forks source link

Small security concern: hide password length? #359

Open dmmsonos opened 4 years ago

dmmsonos commented 4 years ago

When using saml2aws configure or saml2aws login interactively, password length is displayed during typing with asterisks. After entering, the asterisks remain. This is a bit of a security issue. It may be better that the asterisks either disappear, are replaced by a default number of asterisks after entering, or are never displayed.

mapkon commented 1 month ago

Is this still an issue?