Warning about security

posted by simon on Tuesday, November 10, 2009

I think this should be made more obvious than it seems to be at the moment.

Is Tiddlyspot secure?
No. Your password is sent in clear text when uploading and when authenticating to access a private site or your control panel. This means that your Tiddlyspot is vulnerable to packet sniffing and your password could be discovered by a malicious third party. For this reason please don't put sensitive information such as banking details in your Tiddlyspot and don't use the same password that you use for other high security sites.

I've added this to the FAQ here:


Post a Comment

<< Home