[FFmpeg-devel] Would a crypto file be acceptable?

Tomas Härdin git at haerdin.se
Mon Dec 26 13:18:18 EET 2022


mån 2022-12-26 klockan 12:00 +0100 skrev Nicolas George:
> Tomas Härdin (12022-12-26):
> > That we want to avoid having keys in the command line is not
> > unreasonable. A -keyfile argument for crypto: might be appropriate.
> 
> You are confusing two threads, the issue of credentials visible in
> the
> command line is for another proposal. This here is about giving
> options
> without giving options, which is a recurring topic.

Right. And trying to smuggle in command line options via a file feels
made for exploitation..

/Tomas



More information about the ffmpeg-devel mailing list