Make 'forget master password on TC minimize' optional
Moderators: Hacker, petermad, Stefan2, white
Make 'forget master password on TC minimize' optional
From history.txt:
22.02.08 Added: FTP master password: forget master password when the user minimizes TC, or when a screen saver starts
The second one (when screen saver starts) seems reasonable, because that probably means user left unlocked workstation. But the sole purpose of the first one is IMHO to annoy user. ;) Someone else would probably feel different, so what about an ini option 'do not forget master password on minimize'? Sorry if it already exists, I really tried to found it, but had no luck.
22.02.08 Added: FTP master password: forget master password when the user minimizes TC, or when a screen saver starts
The second one (when screen saver starts) seems reasonable, because that probably means user left unlocked workstation. But the sole purpose of the first one is IMHO to annoy user. ;) Someone else would probably feel different, so what about an ini option 'do not forget master password on minimize'? Sorry if it already exists, I really tried to found it, but had no luck.
- ghisler(Author)
- Site Admin
- Posts: 50517
- Joined: 2003-02-04, 09:46 UTC
- Location: Switzerland
- Contact:
It's there as a difference between TC just going to the background (user switches to other program) -> password kept, and user actively minimizes program -> password forgotten.
Author of Total Commander
https://www.ghisler.com
https://www.ghisler.com
- fenix_productions
- Power Member
- Posts: 1979
- Joined: 2005-08-07, 13:23 UTC
- Location: Poland
- Contact:
I agree with Christian here.
When TC is minimized to tray it's more often the case of keeping it there for a longer period of the time. In that case it's more secure to remove password IMHO. Even some password storage tools behave similar to TC in this matter.
When TC is minimized to tray it's more often the case of keeping it there for a longer period of the time. In that case it's more secure to remove password IMHO. Even some password storage tools behave similar to TC in this matter.
"When we created the poke, we thought it would be cool to have a feature without any specific purpose." Facebook...
#128099
#128099
And that's exactly the reason why the default should not be changed, but only an ini option added.
I see it similar to session cookies in web browser, they stay for the time the browser is running and if you want to get rid of them, just close the browser. Try to imagine that you would have to relogin to web application every time you _minimized_ the browser. It's exactly the same with TC.
Yes, forgetting the password on minimize is more secure. Forgetting the password automatically after one minute would be even more secure. There's a very thin line between security and annoyance. Remember Vista's UAC. ;)
If you added it as an ini option, only those who know what they're doing would use it -> average users would be still "safe".
I see it similar to session cookies in web browser, they stay for the time the browser is running and if you want to get rid of them, just close the browser. Try to imagine that you would have to relogin to web application every time you _minimized_ the browser. It's exactly the same with TC.
Yes, forgetting the password on minimize is more secure. Forgetting the password automatically after one minute would be even more secure. There's a very thin line between security and annoyance. Remember Vista's UAC. ;)
If you added it as an ini option, only those who know what they're doing would use it -> average users would be still "safe".
- ghisler(Author)
- Site Admin
- Posts: 50517
- Joined: 2003-02-04, 09:46 UTC
- Location: Switzerland
- Contact:
- ghisler(Author)
- Site Admin
- Posts: 50517
- Joined: 2003-02-04, 09:46 UTC
- Location: Switzerland
- Contact:
-
- Junior Member
- Posts: 63
- Joined: 2006-02-06, 08:51 UTC
- Location: antwerp, belgium
- ghisler(Author)
- Site Admin
- Posts: 50517
- Joined: 2003-02-04, 09:46 UTC
- Location: Switzerland
- Contact:
The KeepMasterPassword switch has been documented in the section about wcx_ftp.ini. Unfortunately this option is too special to put it in the main configuration dialog, sorry.
Author of Total Commander
https://www.ghisler.com
https://www.ghisler.com