Opened 12 years ago

Last modified 12 years ago

#3226 closed Bug report

Export SiteManager Password in Plain Text

Reported by: apmuthu Owned by:
Priority: normal Component: FileZilla Client
Keywords: Cc: apmuthu, Tim Kosse
Component version: Operating system type:
Operating system version:

Description

In FileZilla v2.x the FileZilla.xml had the Passwords MD5 hashed. In FileZilla 3, the XML files are stored in the %USER%/Application Data/FileZilla folder.
The sitemanager.xml file stores the passwords in Plain Text and not as a MD5 Hashed value.
If the SiteManager settings are exported, we find the passwords stored as plain text in the exported file.
Atleast sitemanager.xml should have the passwords hashed.

Change History (1)

comment:1 Changed 12 years ago by Tim Kosse

The client never hashed passwords. Besides, hashes aren't reversible so that's not even an option in the first place.

THe reason for plain text in FZ3 is simple: It's the task of the operating system to protect the user's files.

Note: See TracTickets for help on using tickets.