[Openvpn-users] Re: OpenVPN GUI feature request: saving username/password

["Eric E. Bowles" <bowles@xxxxxxxxxxxxxxx>]

Mathias,

I understand that saving passwords in general could be a security 
risk, but we were considering using smart cards in addition to 
username/password authentication, and typically smart cards have 
their own passwords to read the embedded certificate.  

So in our situation, it would be nice to have to enter just one password
(along with possession of the smart card) rather than enter a total of
three items.  I also know that it's possible to store the username and
password in a file, but I'd like to make that process as transparent as
possible with the user.

I'd also be interested in any feedback from the rest of the list.

--eric

> (I CC the list for more comments...)
> 
> On Thu, 4 Nov 2004, Eric E. Bowles wrote:
> 
> >Firstly, I'd like to thank you for OpenVPN GUI -- it's really cool!
> 
> Thanks.
> 
> >I have what I think is a relatively simple feature request: when using
> >'auth-user-pass' on the client side, it would be nice if the username and
> >password could be optionally saved after typing it in once, just like in
> >the standard Microsoft VPN client.  There might also be another menu option
> >to delete or edit the username and password.
> >
> >Would this be a useful addition?
> 
> Yes, it would probably be a useful feature for some,
> 
> but, it's also a big security breach to save passwords. I think some 
> people have moved to OpenVPN for this very reason, to protect agains users 
> saving their passwords, like they could with the MS VPN client...
> 
> So, I'd like to get more input from the list whether you want such a 
> feature or not?
> 
> -- 
> _________________________________________________________
> Mathias Sundman              (^)   ASCII Ribbon Campaign
> NILINGS AB                    X    NO HTML/RTF in e-mail
> Tel: +46-(0)8-666 32 28      / \   NO Word docs in e-mail

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users