Page 1 of 1

Secured passwords

Posted: December 31st, 2008, 3:37 am
by dill
Great App but in some future release would it be possible to hold the newzbin and news server username and passwords in an encrypted file rather than the SABnzbd.ini file please?

Re: Secured passwords

Posted: December 31st, 2008, 4:18 am
by rascalli
yep that would be a very nice option

Re: Secured passwords

Posted: December 31st, 2008, 5:25 am
by dill
Glad you agree, i hope to see it next year sometimeĀ  ;)
Have a great new year!

Re: Secured passwords

Posted: December 31st, 2008, 10:48 am
by shypike
This would be of limited use.
The problem that we cannot have a secret password for the encryption.

Windows offers some encryption support, but even forĀ  the encrypted storage
of passwords in IE6 and IE7 several cracking utilities are available.

The only thing we could do is some obfuscation, not true encryption.

Real encryption would require you to type in a password
every time SABnzbd is started.

Re: Secured passwords

Posted: December 31st, 2008, 1:27 pm
by rascalli
or maybe make it so that it does not show up in the website templates ?

Re: Secured passwords

Posted: January 1st, 2009, 6:35 am
by shypike
It doesn't. If you look at the HTML source in the browser, you will see that
the passwords are replaced with '*'.
So the current password is not sent to the browser.