zouzj-2009 / dokan

Automatically exported from code.google.com/p/dokan
0 stars 0 forks source link

DokanSSHFS: Passphrase is visibly displayed while typing #207

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Start SSHFS and create a new setting
2. Select "Identity"
3. Type anything in the passphrase box

What is the expected output? What do you see instead?
Expected: Show asterisk or bullets
Observed: Shows actual characters, readable to anyone walking nearby
Preferred: Instead of a passphrase or password input, use a pop-up which 
appears only after pressing "connect", and in which the password/passphrase is 
hidden.

What version of the product are you using? On what operating system?
0.6.0 on WinXP

Please provide any additional information below.
Although password display does not effect cryptographic security, since screens 
can often be seen over the shoulder, particularly with laptops, internet cafe, 
or workplace computers, it is still important that the password is not 
displayed in a readable fashion.

This is particularly true for passphrases, since, unlike passwords, they are 
commonly reused between many sites (like a master password), since it is the 
key that needs to change, not the passphrase.

Original issue reported on code.google.com by s...@a.co.il on 6 Feb 2011 at 7:53