credentials are stored in clear

[Smixi]

Hi,
I wanted to highlight that the password from ElisCtl are stored in clear in the User/.elis/credentials file. Is it planned to put some encryption for atleast the password ? I don't know if it is deliberate or not.

[KPilnacek]

Hello @Smixi,

yes they are stored in plain text. This is a common pattern in CLIs like AWS CLI, or kubectl. So, it is deliberate. For now, there are no plans to store the password in an encrypted form.

In order to increase the security, one can:

• encrypt their harddrive, making the password encrypted and reachable only by their system password, or
• do not store the password using the configure command. Password can be provided via environment variable ELIS_PASSWORD.