[
https://issues.apache.org/jira/browse/SSHD-709?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15595068#comment-15595068
]
Goldstein Lyor commented on SSHD-709:
-------------------------------------
No need - we are encrypting the packet in-place so the plaintext data is
available in it only while the packet is being constructed. Once
{{Session#writePacket}} is invoked, the data is encrypted and thus becomes
un-readable.
> All passwords should be stored as char[] instead of String and wiped after use
> ------------------------------------------------------------------------------
>
> Key: SSHD-709
> URL: https://issues.apache.org/jira/browse/SSHD-709
> Project: MINA SSHD
> Issue Type: Improvement
> Reporter: Guillaume Nodet
> Priority: Minor
>
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)