Is it possible using build in OS X Keychain to support password for Sublime SFTP? If not do you know other possibility how to provide FTP passwords when using SFTP in Sublime Text? Keepass form Windows will be nice but there is no any really working version of Keepass for OS X.
Using OS X Keychain in Sublime SFTP
wbond
#2
If you care about security enough to care if your password is stored on your machine in plaintext (which is good!), I would highly recommend only using the SFTP protocol and using an SSH key with a passphrase. Sublime SFTP fully integrates with the OS X Keychain, Pageant (for Windows) and the various Linux keychain apps for SSH key passphrases. There is no way currently for Sublime SFTP to store FTP passwords in any sort of keychain, however. it is worth noting that the protocol sends them in the clear anyway.
0 Likes
arek1
#3
Thank you for clarification. Actually servers I use do not have shell acces so I can’t use SSH. It is reason why I mainly use FTPS. I read it is almost as secure as SFTP but back for the moment for storing password in plaintext on my machine in sftp-config.json file. Is it really good? Please consider I am from Windows world and even I have last virus on my windows PC more than 10 years ago I still worried about keeping plain text password on my computer.
So please advice me is below scenario OK?:
I will keep password in sftp-config.json file (of course in plain text) but will use FTPS (port 990 etc.). Will never coping sftp-config.json file to server (it will be only on my Mac). Is it OK?
Best wishes
ArekS
0 Likes
wbond
#4
Unfortunately I don’t have a good cross-platform solution to password vaults that are accessible from Python and work with both the command-line sftp program and the python ftplib. Storing the password to an FTP server on your machine in plain text isn’t ideal, but that is the solution for now. If you are concerned about it, you can always use another FTP client that does offer such support. I realize you’ll lose some automation, but only you can be the one to weigh the optoins.
Maybe sometime in the future once I’ve finished my support email backlog and enhancement requests I can look into something like the python keyring library.
0 Likes
arek1
#5
Thank you. Maybe when you will be developing new features in Sublime SFTP first step can be just encrypting password stored in sftp-config.json file? Like in Dreamweaver.
For now if I will be keep password in plain text in sftp-config.json what is main security concern on mac? Software can read password in sft-config.json file (I do not know any one)? Kaylogger? I think no. Any idea what especialy I should avoid? I am not asking typical security precaution (not installing unknow software etc.) but some specyfic to technic for hacking ftp. Write me if I am to paranoic 
Best wishes
ArekS
0 Likes
BUGMENOT
#6
Solution.
➜ ~ cat ~/.ssh/config
Host ubuntu_alias
User ubuntu
Port 22
HostName 192.168.1.5
IdentityFile ~/.ssh/id_rsa
➜ ~ cat ~/Library/Application\ Support/Sublime\ Text\ 3/Packages/User/sftp_servers/terrty
{
"type": "sftp",
"sync_down_on_open": true,
"sync_same_age": true,
"host": "ubuntu_alias",
"user": "ubuntu",
"port": "22",
"remote_path": "/home/ubuntu/",
"connect_timeout": 30,
"ssh_key_file": "~/.ssh/id_rsa",
}
Not sure if .ssh/config is necessary, but this config works.
0 Likes