You are here

Filezilla secure keys are cached in the registry

4 posts / 0 new
Last post
statement
Offline
Last seen: 15 years 1 week ago
Joined: 2008-05-06 12:32
Filezilla secure keys are cached in the registry

I have a login for a SFTP connection, and I got a prompt that the secure key was to be cached in the registry.

The key is left behind is

HKEY_CURRENT_USER\Software\SimonTatham

I assume it's PuTTys doing, and would much prefer this key to be exported/imported, and removed from the registry on exit.

Thanks

John T. Haller
John T. Haller's picture
Offline
Last seen: 4 hours 26 min ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Hmmm

It is indeed PuTTY's doing (for the unfamiliar, FileZilla uses PuTTY to do SFTP using the file fzsftp.exe).

Any idea if this can be used to spoof something later? (i.e. - is it a security issue or merely a leaving data behind issue?)

I have a working fix. I'll post it shortly for a pre-release test.

EDIT - Nope, not a true security issue... but it does essentially leave a trail of what servers you've connected to via SFTP.

Sometimes, the impossible can become possible, if you're awesome!

John T. Haller
John T. Haller's picture
Offline
Last seen: 4 hours 26 min ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Fix

This should be fixed here:
https://portableapps.com/node/14534

Sometimes, the impossible can become possible, if you're awesome!

statement
Offline
Last seen: 15 years 1 week ago
Joined: 2008-05-06 12:32
Just tested it and the

Just tested it and the registry keys are properly imported and exported.

Thanks

Log in or register to post comments