bobrofon / easysshfs

SSHFS for Android
MIT License
100 stars 15 forks source link

[Feature Request] Optionally get prompted for the remote site's password. #50

Open TheHippoMan opened 8 months ago

TheHippoMan commented 8 months ago

As a security measure, it would be helpful if we could optionally configure a mount point specification to have it prompt us for the password of the remote site when performing a mount.

This way, if the mount point is optionally configured in this manner and an unauthorized person gets a hold of the Android device, there won't be a saved password or identity file that could be utilized to directly connect to the remote site ... and instead, the unauthorized person would have to know the site password before the sshfs mount could be performed.

Is such an enhancement possible?

Thank you very much for considering this feature request.

bobrofon commented 8 months ago

Currently the EasySSH application doesn't have such a prompt. But on the mountpoint screen there is a 'Store' checkbox near the 'Password' field (the checkbox is disabled by default). Until this checkbox is enabled, the password will not be persisted on the disk, and the application will hold it in memory until it will be closed. After reopening the application user will have to enter the password again. The prompt would be much more convenient, but from a security point of view there is not much difference.

Identity file is another story. Because EasySSH doesn't support password protected identity files, there is no way to protect them (Android has native disk encryption though).

I need to think how it can be done without major changes in the application.