Secret keys are being logged and showing inside log files
aizatomar opened this issue · 3 comments
aizatomar commented
Hello. Will like to point out that secret keys are being logged out for production app in the BlufiClient file.
DH Secret and AES keys are being logged in the negotiateSecurity
function. May I suggest wrapping these NSLog
within an #if DEBUG
scope so that these secret keys are not accidentally displayed in the log files inside a production app.
XuXiangJun commented
You are right. I will modify it today.
Thank you.
aizatomar commented
No problem. :)
Please update here when the fix has been released. Thank you. :)
brunck commented
This was fixed some time ago.