[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[gcmd-dev] Getting rid of bug 653573 - Passwords stored in plain text in
From: |
Uwe Scholz |
Subject: |
[gcmd-dev] Getting rid of bug 653573 - Passwords stored in plain text in ./gnome-commander/connections |
Date: |
Sun, 1 Mar 2015 09:56:15 +0100 |
User-agent: |
Mutt/1.5.22 (2013-10-16) |
Hi,
currently, connection passwords are stored in plain text in
./gnome-commander/connections when not using GNOME Keyring Manager for
storing passwords in Gnome Commander. This is a security flaw, as
already stated in the bug report #653573 (*).
For the next release of GCMD I plan to get rid of this bug, i.e. I will
remove the ability to store passwords in ./gnome-commander/connections.
This would mean, that only GNOME Keyring Manager will be used in the
future for storing connection passwords.
If anybody has suggestions on how to store passwords in a secure way in
a usual text file (preferably using some ready to use C libraries),
please let me know. Otherwise, as said above, I will remove the current
password storing behaviour from GCMD.
Best wishes,
Uwe
(*) https://bugzilla.gnome.org/show_bug.cgi?id=653573
- [gcmd-dev] Getting rid of bug 653573 - Passwords stored in plain text in ./gnome-commander/connections,
Uwe Scholz <=