Note that since the cryptography relies on {@link jenkins.model.Jenkins#getSecretKey()}, this is not meant as a protection against code running in the same VM, nor against an attacker who has local file system access.
{@link Secret}s can correctly read-in plain text password, so this allows the existing String field to be updated to {@link Secret}. @author Kohsuke Kawaguchi
|
|