Mremoteng: Passwords Exported in ClearText (.csv)

[PCNerd2001]

When exporting connections using the .csv, the password is displayed in clear text. The doesn't occur when exporting to .xml.

To reproduce on Windows 10 build (1803):

1. Select File, Export to File.
2. Select the file format for .csv.
3. Export and open file.

[sparerd]

There is really no way for us to export and then re-import encrypted text using csv format in a nice way. We need to provide a number of details in the .xml format to tell mRemoteNG how to decrypt it. If we do the same in csv format, we need to include that data in every row of the csv. If we provide the encrypted value but no indication of how it was encrypted, then it will be essentially impossible to decrypt it. Why provide the value at all, at that point?

Maybe we should provide a large warning when exporting CSV with the Password field selected? That way it is very obvious that unsecure stuff is about to happen. Maybe even unselect the Password field by default so it doesn't accidentally get included?

[sparerd]

For that matter, the external tools window should provide a similar warning when tools include the %Password% variable. It would be good practice for us to warn users about these clear text password situations.

[PCNerd2001]

Thanks for the response! I appreciate your hard work and a great product.