dry lintel
I’m concerned about the recent inclusion of ChatGPT history in the Codex app, especially when using remote SSH targets.
Normal ChatGPT conversations are not visible in the Codex CLI. However, they appear in the Codex app when using the same account/session token, even if the CLI was authenticated through device-code login.
This raises a security concern: when Codex is connected to a remote SSH target, it is not clear whether any ChatGPT history, session data, or related account context could become accessible or exposed through that remote environment.
Could there be a setting to disable ChatGPT history inside Codex, especially for remote SSH sessions? It would also make sense to disable this automatically when Advanced Account Security is enabled.