You are here

Home » Forums » Support Forums » Internet Apps Support

Filezilla secure keys are cached in the registry

4 posts / 0 new
Log in or register to post comments
Last post
July 10, 2008 - 7:39pm
#1
statement
Offline
Last seen: 14 years 4 months ago
Joined: 2008-05-06 12:32
Filezilla secure keys are cached in the registry

I have a login for a SFTP connection, and I got a prompt that the secure key was to be cached in the registry.

The key is left behind is

HKEY_CURRENT_USER\Software\SimonTatham

I assume it's PuTTys doing, and would much prefer this key to be exported/imported, and removed from the registry on exit.

Thanks

Top
July 10, 2008 - 7:47pm
John T. Haller
John T. Haller's picture
Offline
Last seen: 5 hours 33 min ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Hmmm

It is indeed PuTTY's doing (for the unfamiliar, FileZilla uses PuTTY to do SFTP using the file fzsftp.exe).

Any idea if this can be used to spoof something later? (i.e. - is it a security issue or merely a leaving data behind issue?)

I have a working fix. I'll post it shortly for a pre-release test.

EDIT - Nope, not a true security issue... but it does essentially leave a trail of what servers you've connected to via SFTP.

Sometimes, the impossible can become possible, if you're awesome!

Top
July 10, 2008 - 9:53pm
John T. Haller
John T. Haller's picture
Offline
Last seen: 5 hours 33 min ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Fix

This should be fixed here:
https://portableapps.com/node/14534

Sometimes, the impossible can become possible, if you're awesome!

Top
July 11, 2008 - 1:49am
(Reply to #3)
statement
Offline
Last seen: 14 years 4 months ago
Joined: 2008-05-06 12:32
Just tested it and the

Just tested it and the registry keys are properly imported and exported.

Thanks

Top
Log in or register to post comments