-
Notifications
You must be signed in to change notification settings - Fork 13
Plaintext password #16
Description
Our bugzilla server requires authentication. Are the only two options available either to write the password in plaintext on a file, or write in plaintext on the command line?
Either of these two options is very insecure, since anyone with access to the machine can now see the password (in my setting is worse since we use shared dev machines for a lot of dev tasks, and bugzilla authenticates with ldap which means this password controls everything else and not just bugzilla).
It would be nice if when password is required but not provided bugzillatools asked for it through standard input. Even better if bugzilla cached the authentication tokens for later reuse (pybugz has this feature but bugzilla tools is better in a lot other ways).
Are these features likely to be accepted if contributed?