mqtt password exposed in plain text

Zeppelin500 / MBusino

M-Bus/OneWire/I²C --> MQTT-Gateway with a shield for ESP8266 D1 mini

GNU General Public License v3.0

19 stars 5 forks source link

mqtt password exposed in plain text #16

Closed markuspulch closed 4 months ago

markuspulch commented 5 months ago

Describe the bug mqtt password exposed in plain text in topic MBusino/settings/pswd.

Expected behavior a password should never be actively exposed

Additional context I guess it should be self explainatory that this behaviour is a no-go from a security perspective. I guess is was implemented for debugging purposes not nevertheless there should be at least an option to disable this behaviour.

Zeppelin500 commented 5 months ago

You are right, was for debugging. As I don't use authentication for my MQTT network, no focus on this. Next version will be without mqtt password.

Zeppelin500 commented 4 months ago

hide MQTT Password in 0.9.8