Access Key/Secret Key Encrypted When Saved in Quick Connect?

[RickKruer]

hello,

I am testing BucketExplorer and like it very much (although I would prefer a native Windows program instead of Java, but I understand the lure of writing for multiple platforms).

When I save my AWS Access Key and Secret Key in a Named Quick Connect slot, where is this data kept?
In the Windows registry?
Or in a config file on the filesystem?

Is this data encrypted so a casual user cannot view the config file and see my Access key and Secret key?

thanks, Rick

[Saurabh Dani]

[RickKruer]

Thank you for the info about the secret keys kept in the XML file. I am wondering how "strong" an encryption do you use on this or it is a simple scramble that would be easily discovered by reversing the scramble?

Also, I am concerned about the security of using Quick Access, since Bucket Explorer permits direct access to my files on AWS, anyone that can access my computer and start Bucket Explorer has keys to the kingdom of all my unencrypted files on AWS.

I realize I can NOT use Quick Access, but that is a real pain to enter both the Access key and Secret key each time I start Bucket Explorer.

Would it be possible to add a "user defined password" option that would be required to start Bucket Explorer. Alternately, you could make the Quick ACcess item require a password, so that when I select a Quick Access item then BE will prompt me for the config password.

thanks, RIck

[Saurabh Dani]

It is not a simple scramble, but its not 100% secure. So yes, we can do what you are suggesting. We can add this in the next release.