Feature request (webui): No password

Suggestions and discussion of future versions
Locked
mrbrdo
Member
Member
Posts: 37
Joined: Mon Jun 02, 2008 6:18 am

Feature request (webui): No password

Post by mrbrdo »

Can you give an option to disable password protection of the webui (at least allow blank password and in that case do not prompt for it)?
I have many apps on my server which are all only accessible via VPN and i have a password before you can enter any of them already, so now i have a double-password protection. Also i don't think torrents are that important to even need a password protection anyhow.

Thanks.
DelugeFanBoi
Member
Member
Posts: 10
Joined: Wed Sep 24, 2008 10:33 pm

Re: Feature request (webui): No password

Post by DelugeFanBoi »

It would open a critical security hole.
Imagine a bad guy starts an infected torrent on your machine and set up the System-Autostart-Directory of your OS as default DIR to move the completed torrent to. Thats why you should change the standard port and set up a password.

Don't ask who cares so much for other peolpe's downloads. A bot can be easily set up to hunt for torrent-clients that are known for such weaknesses and people who are not aware of it are going to get problems.

Cheers
mvoncken
Developer
Developer
Posts: 225
Joined: Mon Sep 03, 2007 9:38 pm

Re: Feature request (webui): No password

Post by mvoncken »

In 1.1 the sessions are persistent/saved.
So you would not have to login that much.
dev: webui, core, labels | irc:vonck7 |
Locked