Home | Blog | Software | Reviews and Features | Forum | Help | Donate | About us
topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • December 04, 2016, 10:26:54 AM
  • Proudly celebrating 10 years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Author Topic: [Feature Request] Encryption? Password Protection?  (Read 2160 times)

Renegade

  • Charter Member
  • Joined in 2005
  • ***
  • Posts: 13,220
  • Tell me something you don't know...
    • View Profile
    • Renegade Minds
    • Donate to Member
[Feature Request] Encryption? Password Protection?
« on: September 03, 2013, 09:39:30 AM »
I just breezed through the Options, but didn't see an option for encryption.

I know that this is far from a trivial task, so I don't ask lightly.

Would it be possible/feasible to add in database encryption with password and key file protection?

When I look at CHS and see my uber-mega-awesome super-silly-long passwords there, I can see that I have a gaping hole in my security. I realize that admin privileges and the like can allow access to the file/database, but when they're in clear text or if the program doesn't require authentication, I've got an issue.

If it's beyond the scope of what you're looking to do with CHS, then that's fine. I just need to change my behaviour there.

To phrase it slightly differently, could it be friendlier for password management programs like Keepass?

If it's already in there - sorry, I just missed it.

(I did see the option to ignore programs, which I have used.)
Slow Down Music - Where I commit thought crimes...

Freedom is the right to be wrong, not the right to do wrong. - John Diefenbaker

rjbull

  • Charter Member
  • Joined in 2005
  • ***
  • default avatar
  • Posts: 2,925
    • View Profile
    • Donate to Member
Re: [Feature Request] Encryption? Password Protection?
« Reply #1 on: September 03, 2013, 03:41:12 PM »
I know it's not what you asked, but I use KeePass, and use CHS's "ignore" feature to ignore clips coming from KeePass.  So that's two programs not one, but helps security a bit.

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 36,406
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
Re: [Feature Request] Encryption? Password Protection?
« Reply #2 on: September 03, 2013, 07:12:55 PM »
It's a very good question, but i'm afraid rj has the most practical answer.

Which is that trying to add protection and encryption into CHS would not be easy, and would never be all that secure.

I may look into ways i can make the database on disk somewhat encrypted from naive eyes, the bottom line is that CHS is never going to be truly high security.

So, as rjbull describes, the best solution is to use a proper password utility, and instruct CHS to NEVER COPY text placed on the clipboard from such an app.

See also this thread:
http://www.donationc...ex.php?topic=16431.0

It describes how CHS will ignore text that is placed onto the clipboard and tagged with an "IgnoreClip" security tag.

Renegade

  • Charter Member
  • Joined in 2005
  • ***
  • Posts: 13,220
  • Tell me something you don't know...
    • View Profile
    • Renegade Minds
    • Donate to Member
Re: [Feature Request] Encryption? Password Protection?
« Reply #3 on: September 03, 2013, 10:41:12 PM »
Yeah, I was guessing that it might be more trouble than it's worth.

I've already got some other programs on "ignore" in the Options there.

Thanks.
Slow Down Music - Where I commit thought crimes...

Freedom is the right to be wrong, not the right to do wrong. - John Diefenbaker

Geminate

  • Participant
  • Joined in 2008
  • *
  • default avatar
  • Posts: 10
    • View Profile
    • Donate to Member
Re: [Feature Request] Encryption? Password Protection?
« Reply #4 on: December 09, 2013, 11:36:11 PM »
If you tell Clipboard H+S to ignore your browser (where you are pasting all kinds of passwords and user names) it then ignores everything you copy or paste into your browser beyond user names and passwords - this is not a solution.  A simple application password required to start Clipboard H+S would be adequate in keeping most snoops out - having no security lets anyone in.

rjbull

  • Charter Member
  • Joined in 2005
  • ***
  • default avatar
  • Posts: 2,925
    • View Profile
    • Donate to Member
Re: [Feature Request] Encryption? Password Protection?
« Reply #5 on: December 10, 2013, 04:10:59 PM »
If you tell Clipboard H+S to ignore your browser (where you are pasting all kinds of passwords and user names) it then ignores everything you copy or paste into your browser beyond user names and passwords - this is not a solution.
If you're replying to my suggestion, you tell CHS to ignore eveything coming from KeePass.  It still copies everything you clip from your browser.  This idea assumes, of course, that the web page doesn't show passwords as plain text, but that's very rare.