Topic "Save key and Password"

Author Message
Beejai

Guest


Why, whaen it is possible to save sessions with a password (Warning Message) or a key, is it not possible to save a session with a Password AND key?
Advertisements
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24553
Location: Prague, Czechia
Generally is was meant as hint to user that the password will not be used to decode the key. It is used only as account password. And typically user is not required to both enter password and provide private key. Are you?

Anyway, the next version will allow both the key and password.
_________________
Martin Prikryl
Beejai
[View user's profile]

Joined: 2005-07-25
Posts: 3
Yes, we got some systems that require password AND key authentication for maximum security. Thank you for adding this feature.

beejai
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24553
Location: Prague, Czechia
If you have it for maximum security, why do you ask me to add an option to save the password? You lose the security.
_________________
Martin Prikryl
Beejai
[View user's profile]

Joined: 2005-07-25
Posts: 3
prikryl wrote:
You lose the security.

.. by storing the required information to logon. right. But we very well watch who & where the information is stored.

In real life, you gain a lot security by requiring both pw and key. For many of our larger partners for example it is quite hard to replace a key without some work (equals money) and implications to the running business. But it is easy to change the password periodically. With this they prevent ex employees that had access to the key to use the system after they had been laid off. And using password only is to unsecure for other partners that have theyr keys stored/accessed in a better way.

On the other hand, on the already secured administrators workstations, it saves a lot time to have the pw and key stored in a saved session.

Or the other line of reasoning: It's a feature. you don't have to use it. You may loose some security, but it's your choice. Other SW offers this too. why not offer it too?

greetings

Beejai
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24553
Location: Prague, Czechia
I haven't meant I'm not going to give you the option. I've just asked Smile
_________________
Martin Prikryl
Beejai
[View user's profile]

Joined: 2005-07-25
Posts: 3
Thanks for that.
We are looking forward to the next release. Very Happy Very Happy

Beejai
Advertisements

You can post new topics in this forum






Search Site

What is WinSCP?

It is award-winning SFTP client, SCP client, FTPS client and FTP client integrated into one software program for file transfer to FTP server or secure SFTP server. [More]

And it's free!

Donate

About donations

$9   $19   $49   $99

About donations

Recommend

WinSCP Privacy Policy

WinSCP License