Currently 2FA password is passed as string, which is not fully safe, because we can't reliably perform memory zeroing and ensure that it is not stored in memory more than needed.
I propose to implement alternative way (preferably without backward-incompatible API changes), e.g. providing a hash (some kind of callback where we can call PasswordHash?) instead of password.
Ref: #740
gotd / td
Telegram client, in Go. (MTProto API)
1.5k
How does funding with Polar work?
1
Pay now to fund the work behind this issue.
2
Get updates on progress being made.
3
Maintainer is rewarded once the issue is completed.
FAQ
Backer
You're funding impactful open source efforts
Contributor
You want to contribute to this effort
Maintainer
You want to get funding like this too