Is there a way to cookie this, or other authentication method?
Right now, it sends the username and password to the server on every update. Not a big deal for my setup, but for those with shared hosting, anybody running ettercap or other userspace sniffer on server could get the user's login and password in cleartext off the wire.
Not sure if this is a "bug report" or a feature request.
|