Opened 4 years ago
#3466 new bug
daemon passwords stored in plain text
Reported by: | brainchild | Owned by: | |
---|---|---|---|
Priority: | minor | Milestone: | needs verified |
Component: | GTK UI | Version: | 2.0.3 |
Keywords: | Cc: |
Description
Currently, in thin-client mode, the graphical interface stores passwords for remote daemons in plain text (on Linux in ~/.config/deluge/hostlist.conf
).
Passwords should be handled through the desktop password manager (e.g. Gnome Keyring), for secure storage.
I understand that some may view this issue as a request rather than a bug. I am filing as a bug, because the current design creates a serious security liability for users, without their even being aware.
Note:
See TracTickets
for help on using tickets.