New issue
Advanced search Search tips

Issue 874008 link

Starred by 1 user

Issue metadata

Status: Available
Owner: ----
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 3
Type: Feature

Blocked on:
issue 208497



Sign in to add a comment

nassh: allow pasting of private keys while importing

Reported by jbis...@gmail.com, Aug 14

Issue description

This template is ONLY for reporting security bugs. If you are reporting a
Download Protection Bypass bug, please use the "Security - Download
Protection" template. For all other reports, please use a different
template.

Please READ THIS FAQ before filing a bug: https://chromium.googlesource.com
/chromium/src/+/master/docs/security/faq.md

Please see the following link for instructions on filing security bugs:
https://www.chromium.org/Home/chromium-security/reporting-security-bugs

NOTE: Security bugs are normally made public once a fix has been widely
deployed.

VULNERABILITY DETAILS
Secure Shell App 0.8.44.1 client allows importing of private/public keypairs from Google Drive.  It only allows importing from Google Drive which doesn't make sense.  I would perfer the ability to cut and paste custom private/public keys (generated elsewhere) into the app rather than selecting files from Google Drive which is hardly as secure.

VERSION
Secure Shell App - 0.8.44.1

REPRODUCTION CASE
Only can select private/public key files in Google Drive which gets synced to the internet.

FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION
N/A

 
Components: Platform>Apps
Labels: -Type-Bug-Security Pri-3 Type-Feature
Status: Available (was: Unconfirmed)
Thanks for the report. This looks like a feature request, so marking it as such.
Blockedon: 208497
Components: -Platform>Apps Platform>Apps>Default>Hterm
Labels: -Restrict-View-SecurityTeam OS-Chrome
Summary: nassh: allow pasting of private keys while importing (was: Security: Secure Shell App 0.8.44.1 client allows importing of private/public keypairs from Google Drive)
you don't need to copy keys to Google Drive -- you can simply copy them to your Downloads folder

Sign in to add a comment