Comments (4)
i'm sorry, i noticed your issue only now.
if you are using desec as service provider the url is the default one "update.dedyn.io".
you must fill as username and hostname the same thing which is your dns like: "your-choice.dedyn.io" and as password the password they provided.
i tested it right now with my desec account and it works.
are you using desec or something else?
about the password stored in clear what exactly worries you?
i'd like to receive an answer like "i'm worried that my brother uses my pc and steal it" or "i'm worried that some attacker from the internet hack my pc and then steal it".
from who you want the password to be protected? (what is your threat model?)
you may want to take a look at the security faq->password but maybe it's a bit technical.
if you answer the above question i will happily help with the proper answer.
from dynamicdnsupdater.
i'm sorry, i noticed your issue only now.
if you are using desec as service provider the url is the default one "update.dedyn.io".
you must fill as username and hostname the same thing which is your dns like: "your-choice.dedyn.io" and as password the password they provided.
i tested it right now with my desec account and it works.
are you using desec or something else?
I figured it out... The use of the word 'password' messed me up; I was using the 'password' I created for the deSEC account. I finally realized the app was looking for my user 'token'.
about the password stored in clear what exactly worries you?
i'd like to receive an answer like "i'm worried that my brother uses my pc and steal it" or "i'm worried that some attacker from the internet hack my pc and then steal it".
from who you want the password to be protected? (what is your threat model?)
you may want to take a look at the security faq->password but maybe it's a bit technical.
if you answer the above question i will happily help with the proper answer.
IMO and I would imagine most security professionals would agree; storing passwords in the clear is almost always a bad ideal. I know I don't like the idea, especially a token to an domain API. I would think .NET 4.8 has a some great cryptography system tools, Perhaps not?
from dynamicdnsupdater.
.net has crypto but i encrypt your password with what? AES? but aes needs a password! so which one i use? a hardcoded password in the (open source) program? it doesn't add any security...
just few examples: thunderbird and outlook both have a button to show saved passwords, windows has a menu to show saved wifi passwords.
all this without needing third party tools.
storing a password is bad if it is a password for your service, so if you open a website where people can register you don't want to store users passwords but if you need to login to your wifi, mail, ddns, you must store the password and store it in a way that can be recovered automatically.
it's up to you to not let random stranger use your pc/don't open virus because they might steal all your saved passwords and files.
dpapi could be an option but it doesn't change much...
from dynamicdnsupdater.
.net has crypto but i encrypt your password with what? AES? but aes needs a password! so which one i use? a hardcoded password in the (open source) program? it doesn't add any security...
just few examples: thunderbird and outlook both have a button to show saved passwords, windows has a menu to show saved wifi passwords.
-
I must be missing something, I'm running the latest version of MS Outlook at work and I see no such button for the account password. I run the latest version of Thunderbird for home use and also don't see a button to show password.
-
I can see you are settled on the matter, so I will end this conversation.
from dynamicdnsupdater.
Related Issues (8)
- No config saving? No Logging? HOT 4
- Automatic update HOT 15
- Use newer .NET version to support TLS1.2 HOT 1
- DynamicDNSUPdater TLS 1.2 HOT 3
- IP Update Exception HOT 4
- Add a new function that renew automatically the free domain on no-ip.com periodically HOT 2
- Had to turn off ipv6 to get it to work. HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from dynamicdnsupdater.