braiins / bos-plus-api

BOS+ API
20 stars 8 forks source link

Confused about the security model? #4

Closed faissaloo closed 1 year ago

faissaloo commented 1 year ago

Hello there, Can you explain the need for authentication if the protocol sends credentials over plaintext? I'm a little confused on this point. Doesn't sending the password over plaintext make authentication redundant? My only guess is that it's only meant for secure networks but doesn't that make authentication unnecessary?

kamil-triscik commented 1 year ago

Hello Faissaloo, thank you for your question. We totally agree that sending credentials over plaintext seems odd right now.

But here's the deal: We're actually gearing up for the future to amp up our security game. That's why we've introduced this new login/credentials thing. It's a step towards making sure we can smoothly transition to a more secure version down the road.

Best, Kamil from Braiins