[pve-devel] I am only able to open one spice console

[Alexandre DERUMIER]

>>But only the user has access to that file? 
Virus,rootkit, who's known ;)

>>And it is a one time password ticket, only valid for 30seconds. 
>>So you you think this is a security risk? 

If it's a timepassword ticket, no problem !
But do we need sasl for this ?
I mean, the user is already authenticated to proxmox to generate the ticket.

----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: pve-devel at pve.proxmox.com 
Envoyé: Jeudi 27 Juin 2013 08:41:30 
Objet: RE: I am only able to open one spice console 

> Another point, if we download a vnc config file (like for spice), to open remote- 
> viewer, I think the password must but in clear in config file ? 

But only the user has access to that file? And it is a one time password ticket, only valid for 30seconds. 
So you you think this is a security risk?