You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
As a security measure, it would be helpful if we could optionally configure a mount point specification to have it prompt us for the password of the remote site when performing a mount.
This way, if the mount point is optionally configured in this manner and an unauthorized person gets a hold of the Android device, there won't be a saved password or identity file that could be utilized to directly connect to the remote site ... and instead, the unauthorized person would have to know the site password before the sshfs mount could be performed.
Is such an enhancement possible?
Thank you very much for considering this feature request.
The text was updated successfully, but these errors were encountered:
Currently the EasySSH application doesn't have such a prompt. But on the mountpoint screen there is a 'Store' checkbox near the 'Password' field (the checkbox is disabled by default). Until this checkbox is enabled, the password will not be persisted on the disk, and the application will hold it in memory until it will be closed. After reopening the application user will have to enter the password again. The prompt would be much more convenient, but from a security point of view there is not much difference.
Identity file is another story. Because EasySSH doesn't support password protected identity files, there is no way to protect them (Android has native disk encryption though).
I need to think how it can be done without major changes in the application.
As a security measure, it would be helpful if we could optionally configure a mount point specification to have it prompt us for the password of the remote site when performing a mount.
This way, if the mount point is optionally configured in this manner and an unauthorized person gets a hold of the Android device, there won't be a saved password or identity file that could be utilized to directly connect to the remote site ... and instead, the unauthorized person would have to know the site password before the sshfs mount could be performed.
Is such an enhancement possible?
Thank you very much for considering this feature request.
The text was updated successfully, but these errors were encountered: