search

evsar3 / sshfs-win-manager

A GUI for SSHFS-Win (https://github.com/billziss-gh/sshfs-win)
MIT License
1.11k stars 85 forks source link

[Enhancement] More secure storage of passwords #28

Closed RMerl closed 4 years ago

RMerl commented 4 years ago

Currently, the password is stored in plain text in a json file, which is a show stopper for anyone worried about security. Please consider possibly leveraging Windows's protected storage, or some other form of more secure password storage method.

Another alternative could be to allow leaving the Password field empty, and requesting it at connection time, and not storing it on disk afterward. Not as convenient, but may be a simpler alternative.

kpiq commented 4 years ago

Where is that json file? I am unable to edit one of the connections I made. An animated "loading" icon shows up where the Edit pencil should show up, but now I'm worried about leaving behind files with my password on them, encryped or not. Uninstalling and reinstalling didn't erase the connection.

kpiq commented 4 years ago

I want to manually delete any trace of this file.

evsar3 commented 4 years ago

@kpiq see issue #9

evsar3 commented 4 years ago

I'm gonna implement the possibility to ask for the password on connect without storing it anywhere, also, looking for more information on how to use third party key management programs.

evsar3 commented 4 years ago

Resource for asking for the password is finished and should be shipped in beta.2 at weekend.