Preflight checks
Problem or motivation
Currently on GNU/Linux a file called ~/.config/Windscribe/Windscribe2.conf contains a line with an auth hash that lets the app log into an account. The file is in plain text so if you don't encrypt your home partition, someone with access to your drive could steal the config file and use the app from your account.
I was able to take the config file of my Debian laptop to an Arch PC and the app logged me in.
Proposed solution
GNU/Linux has a Secret Service API that lets apps store secrets like the auth hash in an encrypted wallet. The Windscribe app should use this instead.
Alternatives considered
Not everyone uses full disk encryption or an encrypted home partition.
Which platforms should this apply to?
Linux (GUI)
Additional context
No response
Preflight checks
Problem or motivation
Currently on GNU/Linux a file called ~/.config/Windscribe/Windscribe2.conf contains a line with an auth hash that lets the app log into an account. The file is in plain text so if you don't encrypt your home partition, someone with access to your drive could steal the config file and use the app from your account.
I was able to take the config file of my Debian laptop to an Arch PC and the app logged me in.
Proposed solution
GNU/Linux has a Secret Service API that lets apps store secrets like the auth hash in an encrypted wallet. The Windscribe app should use this instead.
Alternatives considered
Not everyone uses full disk encryption or an encrypted home partition.
Which platforms should this apply to?
Linux (GUI)
Additional context
No response