Suggestion 6: Only Save Encrypted Secrets to File

[mpguerra]

Location

frost-client/src/config.rs

Synopsis

The FROST client currently reads sensitive data from configurations, including secrets from a config file, which is not encrypted.

Mitigation

While unencrypted secrets might be acceptable for a demo version, we still recommend refraining from storing secrets in plaintext. A more appropriate approach would be to encrypt this data and prompt the user for a password during login.