Re:Passbolt – Open source password manager for teams
by java-man on Monday November 05, 2018 @05:10PM
(#18386439)
Sharing of credentials negates the very reason said credentials exist in the first place.
Re:Passbolt – Open source password manager for teams
by varenc on Monday November 05, 2018 @05:20PM
(#18386520)
While I don't disagree in theory... practically there a number of services that have one "owner account" that represents an organization and a business needs to make sure they have control of that account regardless of personnel changes. PyPi and Rubygems are examples from an old job.
Even when a service, like Twitter, does have multi-user/multi-owner identities in some business plan this might not make sense for small teams.
Re:Passbolt – Open source password manager for teams
by java-man on Tuesday November 06, 2018 @12:29AM
(#18388625)
A right solution would be a proper key management where each participant maintains his/her password/passphrase that unlocks group credentials.
Otherwise, a bullet proof audit trail with external timestamps would be required.
It is helping a lot on credentials sharing on an iberian IT team.