Opened 3 years ago

#3466 new bug

daemon passwords stored in plain text

Reported by: brainchild Owned by:
Priority: minor Milestone: needs verified
Component: GTK UI Version: 2.0.3
Keywords: Cc:

Description

Currently, in thin-client mode, the graphical interface stores passwords for remote daemons in plain text (on Linux in ~/.config/deluge/hostlist.conf).

Passwords should be handled through the desktop password manager (e.g. Gnome Keyring), for secure storage.

I understand that some may view this issue as a request rather than a bug. I am filing as a bug, because the current design creates a serious security liability for users, without their even being aware.

Change History (0)

Note: See TracTickets for help on using tickets.