babylon-node icon indicating copy to clipboard operation
babylon-node copied to clipboard

Storing KeyStore password in windows environment variable does not feel safe and can be retrieved.

Open SkybuckFlying opened this issue 1 year ago • 0 comments

All set windows environment variables can be retrieved with the power shell command:

gci env:* | sort-object name

There might also be other techniques how applications could retrieve these settings,

I believe Delphi development environment also retrieves windows environment variables.

Therefore I recommend to pass the keystore password as a command line parameter or preferably via a default.config setting.

NOT via windows environment variable:

RADIX_NODE_KEYSTORE_PASSWORD

This is the first time EVER that I have seen a software application do this... very weird/strange ! ;)

SkybuckFlying avatar May 01 '24 17:05 SkybuckFlying