[gcmd-dev] Getting rid of bug 653573 - Passwords stored in plain text in ./gnome-commander/connections

[Uwe Scholz]

Hi,

currently, connection passwords are stored in plain text in
./gnome-commander/connections when not using GNOME Keyring Manager for
storing passwords in Gnome Commander. This is a security flaw, as
already stated in the bug report #653573 (*).

For the next release of GCMD I plan to get rid of this bug, i.e. I will
remove the ability to store passwords in ./gnome-commander/connections.
This would mean, that only GNOME Keyring Manager will be used in the
future for storing connection passwords.

If anybody has suggestions on how to store passwords in a secure way in
a usual text file (preferably using some ready to use C libraries),
please let me know. Otherwise, as said above, I will remove the current
password storing behaviour from GCMD.

Best wishes,
Uwe

(*) https://bugzilla.gnome.org/show_bug.cgi?id=653573