TC Secured session + encrypted RAR autounpack

Here you can propose new features, make suggestions etc.

Moderators: white, Hacker, petermad, Stefan2

Post Reply
User avatar
DrShark
Power Member
Power Member
Posts: 1872
Joined: 2006-11-03, 22:26 UTC
Location: Kyiv, 68/262
Contact:

TC Secured session + encrypted RAR autounpack

Post by *DrShark »

Since TC now has internal secure password-store, I suggest to introduce the possibility to create a so-called "secured profile".
That's what I mean here:
1) start TC's secured session only if user confirmed login/password;
2) for this secured session should be a possibility for on-the-fly encryption of configuration files (*.ini *.bar *.log *.tmp etc);
3) and for secured session TC may have an option to store passwords for archived files, especially *.rar. This way user is safe to make search, compare dirs, view files with lister and other operations without entering password for each passworded archive when TC access it.
Donate for Ukraine to help stop Russian invasion!
Ukraine's National Bank special bank account:
UA843000010000000047330992708
User avatar
fenix_productions
Power Member
Power Member
Posts: 1979
Joined: 2005-08-07, 13:23 UTC
Location: Poland
Contact:

Post by *fenix_productions »

Nice idea.

I will add another one:
- as TC currently can read wincmd.key from ZIP files it could be extended to encrypted ZIP fles too.
"When we created the poke, we thought it would be cool to have a feature without any specific purpose." Facebook...

#128099
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48021
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Post by *ghisler(Author) »

What would be the advantage? TC would have to store the password somewhere to decrypt the key, so any troyan could download also the password...
Author of Total Commander
https://www.ghisler.com
User avatar
fenix_productions
Power Member
Power Member
Posts: 1979
Joined: 2005-08-07, 13:23 UTC
Location: Poland
Contact:

Post by *fenix_productions »

ghisler(Author) wrote:What would be the advantage? TC would have to store the password somewhere to decrypt the key, so any troyan could download also the password...
Isn't it similar to having all FTP passwords in wcx_ftp.ini?
"When we created the poke, we thought it would be cool to have a feature without any specific purpose." Facebook...

#128099
User avatar
Hacker
Moderator
Moderator
Posts: 13052
Joined: 2003-02-06, 14:56 UTC
Location: Bratislava, Slovakia

Post by *Hacker »

fenix_productions,
Isn't it similar to having all FTP passwords in wcx_ftp.ini?
Depends on if they are encrypted or not.

Roman
Mal angenommen, du drückst Strg+F, wählst die FTP-Verbindung (mit gespeichertem Passwort), klickst aber nicht auf Verbinden, sondern fällst tot um.
User avatar
DrShark
Power Member
Power Member
Posts: 1872
Joined: 2006-11-03, 22:26 UTC
Location: Kyiv, 68/262
Contact:

Post by *DrShark »

This suggestion still not implemented, so I want to add some ideas to show its advantages.
If Total Commander would be able to act differently depending on whether the password of tcmdkey.zip was entered correctly at the start of the program, it could be possible to set a following scenarios:
User enters correct password -> TC starts with user license.
If the password isn't correct, TC either starts in Trial mode or doesn't start at all.
This can be extended even more if it will be possible to set a folder where all zip files will be treated as tcmdkey files. So after user enters the password, TC checks all zip files and on match applies license and starts itself with uniqe user-defined settings.
Donate for Ukraine to help stop Russian invasion!
Ukraine's National Bank special bank account:
UA843000010000000047330992708
Post Reply