PW lenght of devices shown in WebUI

[jdemmer]

Hi,

maybe not an important subject, but I noticed that the PW length is visible when you look under access.

Even if people can't see the PW in clear text, it helps a lot when trying to break in if you know the length of the PW you want to hack.

So assuming you have an employee who wants to hack into the system, seeing the PW length while looking over your shoulder gives them a good chance of guessing the right PW if it is not a random one.

And most attacks come from the inside.....

Suggestion:

While entering, it is good to show the amount of characters.

Once stored, I suggest we always show a fixed length, e.g.8 * to indicate that a PW was entered.

Thanks!

Jens

[Brian Bergin]

Agreed.

[Marcos Hernandez · Accepted solution]

Hi Jens,

I will track this enhancement and put it on the feature list.

Thanks,

Marcos

[Brook Powers]

I agree.

It would obviously benefit Cisco and its clients if the devices were secure by default.

For instance, https would always be suggested inm place of http, and ssh would be used unless telent is specifically chosen, etc.