3 ms·

The worst thing about FileZilla is clear text password files. The developer refuses to fix it I am not sure why.

• DanBC 12y ago
  What's the alternative? It's a good thing that the developer does not give you a false sense of security. http://security.stackexchange.com/questions/39321/should-i-use-filezilla http://security.stackexchange.com/questions/39321/should-i-u...
  • electrotype 12y ago
    A master password, no?
    • DanBC 12y ago
      No. See the acres of discussion about Google Chrome not having a master password. The fact that they caved in and no provide a master password does not mean it's a good idea.
      • pb2au 12y ago
        The argument that I recall for Chrome not having an optional master password was that it was often less secure than using the system's encrypted data store for their account, if available. Requiring a master password to decrypt the network passwords is a perfectly fine idea if you want to maintain portability and reduce the chance that your network passwords are accidentally exposed. An attacker has to both have the password file and either figure out the master password or have code execution privileges on the user's account to gain the network passwords. This is more secure than trying to ensure the password file doesn't get "misplaced" (e.g. on an unencrypted drive, in unencrypted backups, unintentionally through a fileserver, etc).