Encoding passwords

[René Diepstraten]

I'd like the passwords in recentservers.xml and sitemanager.xml
to be encoded. Lately, quite a few trojan horses harvest FTP logins for mass infection of websites.
I think it's necessary to make ftp login harvesting as hard as possible, thus encryption of passwords seems much needed.

[Tim Kosse]

• Obfuscation, simply does not work.
• Encryption, requires user to enter password. In this case, why store at all? Use Ask logon type in sitemanager
• Friends and coworkers accessing your system and reading your files: Such people are not your friends. Use full disk encryption and disallow others to use your computer
• Trojan infection, if infected you cannot trust your computer, the trojan is more powerful than you, the user. You need to prevent infection.

Conclusion: The weakest link is the overall security of the operating system. A (security) chain is only as strong as its weakest link. On a secured computer plain text passwords are secure.

[Alexander Schuch]

This is a duplicate of #2935.