Why method operate on passwords as strings? - Githubissues

dotnet / dotnet-api-docs

.NET API reference documentation (.NET 5+, .NET Core, .NET Framework)

https://docs.microsoft.com/dotnet/api/

Other

718 stars 1.56k forks source link

Why method operate on passwords as strings? #1081

Open TomaszOledzki opened 5 years ago

TomaszOledzki commented 5 years ago

Why this method operate on passwords as strings and not securestrings? Wouldn't it be more secure if passwords be securestrings?

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: a06971de-5a65-d773-5466-254003744104
Version Independent ID: 86be034d-a82d-ee11-0196-e0b9e544cbe5
Content: X509Certificate2Collection.Import Method (System.Security.Cryptography.X509Certificates)
Content Source: xml/System.Security.Cryptography.X509Certificates/X509Certificate2Collection.xml
Product: dotnet-api
GitHub Login: @dotnet-bot
Microsoft Alias: dotnetcontent

svick commented 5 years ago

Not really. Here is an explanation for why SecureString shouldn't be used.