Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature Request] Optionally get prompted for the remote site's password. #50

Open
TheHippoMan opened this issue Mar 3, 2024 · 1 comment

Comments

@TheHippoMan
Copy link

As a security measure, it would be helpful if we could optionally configure a mount point specification to have it prompt us for the password of the remote site when performing a mount.

This way, if the mount point is optionally configured in this manner and an unauthorized person gets a hold of the Android device, there won't be a saved password or identity file that could be utilized to directly connect to the remote site ... and instead, the unauthorized person would have to know the site password before the sshfs mount could be performed.

Is such an enhancement possible?

Thank you very much for considering this feature request.

@bobrofon
Copy link
Owner

bobrofon commented Mar 4, 2024

Currently the EasySSH application doesn't have such a prompt. But on the mountpoint screen there is a 'Store' checkbox near the 'Password' field (the checkbox is disabled by default). Until this checkbox is enabled, the password will not be persisted on the disk, and the application will hold it in memory until it will be closed. After reopening the application user will have to enter the password again. The prompt would be much more convenient, but from a security point of view there is not much difference.

Identity file is another story. Because EasySSH doesn't support password protected identity files, there is no way to protect them (Android has native disk encryption though).

I need to think how it can be done without major changes in the application.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants