On Thu, May 21, 2020 at 06:06 Madhukar Bhosale <[email protected]> wrote:
> > > > > Hi, > > > > I am seeing username, password and TOTP in plain text after logging into > Guacamole as well as token URL. > > > > > Yes, this is normal and not a cause for concern. You’d see the same for any other web site that you log into with a username and password, because you are looking at the browser’s debug tools. This does not mean that it is being transmitted in plain text - from the screenshot I can see that you are using HTTPS, so the data is going to the server encrypted. However, because you are viewing the browser debug tools you are seeing it prior to encryption. -Nick
