Page 1 of 1

Make 'forget master password on TC minimize' optional

Posted: 2009-05-03, 15:32 UTC
by Sob
From history.txt:

22.02.08 Added: FTP master password: forget master password when the user minimizes TC, or when a screen saver starts

The second one (when screen saver starts) seems reasonable, because that probably means user left unlocked workstation. But the sole purpose of the first one is IMHO to annoy user. ;) Someone else would probably feel different, so what about an ini option 'do not forget master password on minimize'? Sorry if it already exists, I really tried to found it, but had no luck.

Posted: 2009-05-04, 16:36 UTC
by ghisler(Author)
It's there as a difference between TC just going to the background (user switches to other program) -> password kept, and user actively minimizes program -> password forgotten.

Posted: 2009-05-04, 16:41 UTC
by Boofo
Minimizing seems more like a temporary close of TC when focusing is different. I'm not sure I explained that right, by the way.

Posted: 2009-05-04, 17:24 UTC
by fenix_productions
I agree with Christian here.

When TC is minimized to tray it's more often the case of keeping it there for a longer period of the time. In that case it's more secure to remove password IMHO. Even some password storage tools behave similar to TC in this matter.

Posted: 2009-05-05, 17:01 UTC
by Sob
And that's exactly the reason why the default should not be changed, but only an ini option added.
I see it similar to session cookies in web browser, they stay for the time the browser is running and if you want to get rid of them, just close the browser. Try to imagine that you would have to relogin to web application every time you _minimized_ the browser. It's exactly the same with TC.
Yes, forgetting the password on minimize is more secure. Forgetting the password automatically after one minute would be even more secure. There's a very thin line between security and annoyance. Remember Vista's UAC. ;)
If you added it as an ini option, only those who know what they're doing would use it -> average users would be still "safe".

Posted: 2009-05-05, 17:23 UTC
by m^2
Support++.
IMO TC should forget the master password only when a screen saver kicks in.

Posted: 2009-05-05, 20:51 UTC
by ghisler(Author)
I will consider it as an option in the ini.

Posted: 2009-05-16, 14:41 UTC
by Sob
history.txt wrote:12.05.09 Added: wcx_ftp.ini [General] KeepMasterPassword= Allow to keep master password when: 1: program is minimized 2: screen saver starts 3: both
Works great. Thank you. :)

Posted: 2009-05-17, 12:24 UTC
by ghisler(Author)
Thanks for trying it!

Posted: 2009-05-19, 19:54 UTC
by bop sprengers
This and many other topics are being handled very professionaly by CG.
May I beg for proper, documentation ?

Posted: 2009-05-19, 21:43 UTC
by m^2
Thanks, Christian. :)

Posted: 2009-05-20, 19:47 UTC
by ghisler(Author)
The KeepMasterPassword switch has been documented in the section about wcx_ftp.ini. Unfortunately this option is too special to put it in the main configuration dialog, sorry.