[Commotion-admin] [commotion-quick-start] Mesh password (#27)

[Ben West]

I fully understand that providing a field where users could enter "password" as their password value will invariably lead to instances where users do actually enter "password," regardless of any bolded warning text on the form, or even javascript nags.  That is just human nature.

However, not providing this field at all does still ultimately limit the UI, perhaps needlessly.  Image you're needing to flash a new node to participate in an existing mesh (which has an existing, secure mesh password).  Being able to paste that password into the new node's quick start form would make this task very easy.

Suggested alternative: provide a form input for the mesh/adhoc password, but have it pre-populated with a reasonably long string of random chars, up to 63chars long.  This string doesn't have to be (pseudo) randomly generated; since you would still like for a collection of newly flashed nodes to still mesh together right away.  Put a brief description under the field explaining the password's purpose, including that only the nodes need to know this password internally.  No human should need to use the mesh password (besides during initial quick start).

---
Reply to this email directly or view it on GitHub:
https://github.com/opentechinstitute/commotion-quick-start/issues/27#issuecomment-22977442
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.chambana.net/pipermail/commotion-admin/attachments/20130820/e96c89c5/attachment.html>