View previous topic :: View next topic |
Author |
Message |
RicochetPeter
Joined: 26 Feb 2007 Posts: 10
|
Posted: Wed Feb 28, 2007 10:40 am Post subject: RMA password in clear text |
|
|
Hi KS-Soft,
I see that the windows RMA hides its password in two lines of text which are somewhat cryptic, whereas the Linux RMA uses the password in clear text. This looks like a little security hole to me. Is it possible to have it in a similar form as in the Windows RMA? |
|
Back to top |
|
|
KS-Soft Europe
Joined: 16 May 2006 Posts: 2832
|
Posted: Wed Feb 28, 2007 10:51 am Post subject: Re: RMA password in clear text |
|
|
RicochetPeter wrote: | This looks like a little security hole to me. |
I do not think so. All traffic between RMA and HostMonitor or RMA and RMA Manager is encrypted using MD5 + Twofish encryption and the password itself is never transmitted through the network without encryption.
Regards,
Max |
|
Back to top |
|
|
RicochetPeter
Joined: 26 Feb 2007 Posts: 10
|
Posted: Wed Feb 28, 2007 11:21 am Post subject: |
|
|
Having it in the config file (rma.ini) in clear text is what I would like to prevent... |
|
Back to top |
|
|
KS-Soft
Joined: 03 Apr 2002 Posts: 12795 Location: USA
|
Posted: Wed Feb 28, 2007 4:08 pm Post subject: |
|
|
Probably we will change that in the future.
On the other hand
1) if somebody has access to your system, he can make a lot of problems without knowing this password
2) You may restrict access to this file
Regards
Alex |
|
Back to top |
|
|
RicochetPeter
Joined: 26 Feb 2007 Posts: 10
|
Posted: Thu Mar 01, 2007 7:48 am Post subject: |
|
|
thx |
|
Back to top |
|
|
|