+1 on this, Alireza I think it would be best if you submitted a bug in https://issues.apache.org/jira/
-- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro ----- Original Message ----- > From: "Alireza Eskandari" <astro.alir...@yahoo.com.INVALID> > To: dev@cloudstack.apache.org > Sent: Thursday, 27 November, 2014 14:54:40 > Subject: A secure way to reset VMs password > HiI viewed the bash script that resets Linux password > (http://download.cloud.com/templates/4.2/bindir/cloud-set-guest-password.in)It > seems that it doesn't use a secure way for transferring password string to > instance.Instances on a shared network can sniff password requests and export > requested password of other instances.I suggest to use SSL (https) instead of > plan text.Regards
