RMA password in clear text

RicochetPeter · Post by **RicochetPeter** » Wed Feb 28, 2007 10:40 am

Hi KS-Soft,

I see that the windows RMA hides its password in two lines of text which are somewhat cryptic, whereas the Linux RMA uses the password in clear text. This looks like a little security hole to me. Is it possible to have it in a similar form as in the Windows RMA?

KS-Soft Europe · Post by **KS-Soft Europe** » Wed Feb 28, 2007 10:51 am

RicochetPeter wrote:This looks like a little security hole to me.

I do not think so. All traffic between RMA and HostMonitor or RMA and RMA Manager is encrypted using MD5 + Twofish encryption and the password itself is never transmitted through the network without encryption.

Regards,
Max

RicochetPeter · Post by **RicochetPeter** » Wed Feb 28, 2007 11:21 am

Having it in the config file (rma.ini) in clear text is what I would like to prevent...

KS-Soft · Post by **KS-Soft** » Wed Feb 28, 2007 4:08 pm

Probably we will change that in the future.
On the other hand
1) if somebody has access to your system, he can make a lot of problems without knowing this password
2) You may restrict access to this file

Regards
Alex

RicochetPeter · Post by **RicochetPeter** » Thu Mar 01, 2007 7:48 am

RMA password in clear text

RMA password in clear text

Re: RMA password in clear text