search

amoussard / sftp-deployment

Spend less time managing file transfers and more time coding. SFTP support for Atom.io to send and receive files directly in your server.
MIT License
76 stars 44 forks source link

No JIT password prompt #5

Open dcunited08 opened 10 years ago

dcunited08 commented 10 years ago

I believe it is a security issue to have no prompt to the user if they don't include a password in their config file.

amoussard commented 10 years ago

Hi @dcunited08 , Indeed, it a security issue. I will try to resolve it in the next releases. Thank you for your feedback !

qbolec commented 9 years ago

Moreover, when I left the password equal to empty string (which is the initial value suggested by the wizzard), then the error I got was really confusing: "Cannot establish connection: path must be a string".

qbolec commented 9 years ago

One more thing: the defaults seems to work in such a way that the include file itself gets synchronized to the server. This is even more serious security issue cause now I shared my password with coworkers :)