smbj icon indicating copy to clipboard operation
smbj copied to clipboard

Enforce security by default

Open DHerls opened this issue 1 year ago • 1 comments
trafficstars

smbj by default does not require message signing and does not encrypt data. This could lead to program authors inadvertently writing insecure software.

The library should have secure defaults and allow users to reduce their security if they need.

DHerls avatar Feb 12 '24 16:02 DHerls

With these settings you'll also need to remove the supported dialects for SMB2. The goal of the default config is to make it more compatible. I would welcome a second "default setup" which is more secure.

So adding a createSecureConfig()

hierynomus avatar Feb 28 '24 09:02 hierynomus