Plaintext Passwords on VPN Server

[laxboy10]

I have a RT-N66U with Firmware:3.0.0.4.374.38_2 (Merlin build). When setting up the router as a VPN server I noticed that all the usernames and passwords are displayed in plaintext. In future releases could these be encrypted or if that's too much work just obfuscated.

Below is an image from the Asus RT-N16 support page which shows a plaintext username and password for a PPTP VPN server on ASUSWRT.

 

[RMerlin]

That might be tricky, since Asus effectively stores data inside the HTML DOM itself.