[Koti Kanna <[email protected]> (2013-01-09 10:31:55 UTC)]

> I am using npm module imap to fetch emails. where it requires username and 
> password to fetch mails. This mail client i am hosting on a third party 
> machine. My worry is, if any body open this file they can actually see my 
> user name and password. Is there any way to precompile this module into 
> machine code?

Even if the code is compiled, I don't think it would be that hard to
extract the password from the compiled code.

If you want better security, you could keep the username and password
only in the memory of a long running daemon process. That way, at
least someone may need to read the virual memory of that process in
order to get the password, not that this is incredibly hard either.

- Harald

-- 
Job Board: http://jobs.nodejs.org/
Posting guidelines: 
https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
You received this message because you are subscribed to the Google
Groups "nodejs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/nodejs?hl=en?hl=en

Reply via email to