transmissionbtc
transmissionbtc copied to clipboard
AndreyPavlenko
Secure default settings for the RPC
Hi there!
I see that the RPC is enabled by default, which is cool, but without authentication, anything on your network is able to use it.
Could you add a random username/password by default (and a button to reveal the current password, like it's usually done in other apps, so the user can see the generated password) so it has some level of security by default?
I think it would be better to disable RPC by default. Many people use the app in a private net and do not need any passwords. Anyway, transmission does not support https, thus password is a weak protection.
It is, but it's better than nothing, I think.
And what are your thoughts on disabling RPC by default? I thought it would be a big part of what the app does, so you wouldn't desire that.
In the settings there is the option - Enable RPC. By default it's enabled. When I said "disable RPC by default" I meant - change the default value of this option.