nxsh icon indicating copy to clipboard operation
nxsh copied to clipboard

Feature Request: Don't display characters when entering the password

Open fennectech opened this issue 6 years ago • 3 comments

I recomend not displaying the charicters when the user enters their password Its usually done to foil shoulder surfers but with telnet its like making your lock out of paper.

fennectech avatar Nov 06 '18 05:11 fennectech

The password will still have be transferred through telnet so "hiding" the chars wouldn't make any difference in transfer-security.

jakibaki avatar Nov 06 '18 14:11 jakibaki

There are some 3 byte telnet character codes that essentially say "echo" or "no echo," provided the client is willing to listen. I'll look into using those to address the "over the shoulder" concern. Transporting in plaintext really is the bigger weakness though, as @jakibaki pointed out.

Cesura avatar Nov 06 '18 14:11 Cesura

Yeah.

fennectech avatar Nov 06 '18 22:11 fennectech