[ 
https://issues.apache.org/jira/browse/SSHD-709?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15595068#comment-15595068
 ] 

Goldstein Lyor commented on SSHD-709:
-------------------------------------

No need - we are encrypting the packet in-place so the plaintext data is 
available in it only while the packet is being constructed. Once 
{{Session#writePacket}} is invoked, the data is encrypted and thus becomes 
un-readable.

> All passwords should be stored as char[] instead of String and wiped after use
> ------------------------------------------------------------------------------
>
>                 Key: SSHD-709
>                 URL: https://issues.apache.org/jira/browse/SSHD-709
>             Project: MINA SSHD
>          Issue Type: Improvement
>            Reporter: Guillaume Nodet
>            Priority: Minor
>




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to