Disable local storage (Known hosts) - security problem, private key stored in clear in local storage on browser

[jerome-karabenli]

It is possible to disable local storage usage with env vars ?
The sshwifty-knowns key in local storage on browser store also private key. Anyone can access to sshwifty web even if not logged in, can view all private keys.

[nirui]

Greetings,

Sshwifty should not save private keys or password to sshwifty-knowns unless they were delivered through Presets. If you find it don't work like that, then probably it's a bug.

Can you share the exact steps that lead to the password being saved?

Also while we at it, it is not recommended to add things you want to kept secret in Presets as all Presets are send to client in clear-text out the open (as described under: https://github.com/nirui/sshwifty/blob/01e3e595aef1251084646ccec9805a6450d7d48e/README.md#configuration-file-option-and-descriptions)