[Deluge] #3466: daemon passwords stored in plain text

3 views
Skip to first unread message

Deluge

unread,
May 3, 2021, 5:11:11 AM5/3/21
to delug...@googlegroups.com
#3466: daemon passwords stored in plain text
----------------------------+--------------------
Reporter: brainchild | Type: bug
Status: new | Priority: minor
Milestone: needs verified | Component: GTK UI
Version: 2.0.3 | Keywords:
----------------------------+--------------------
Currently, in thin-client mode, the graphical interface stores passwords
for remote daemons in plain text (on Linux in
`~/.config/deluge/hostlist.conf`).

Passwords should be handled through the desktop password manager (e.g.
Gnome Keyring), for secure storage.

I understand that some may view this issue as a request rather than a bug.
I am filing as a bug, because the current design creates a serious
security liability for users, without their even being aware.

--
Ticket URL: <https://dev.deluge-torrent.org/ticket/3466>
Deluge <https://deluge-torrent.org/>
Deluge Project

Reply all
Reply to author
Forward
0 new messages