Re:KeePassXC 2.4.3
by benoliver999 on Wednesday June 12, 2019 @10:06AM
(#20164749)
I agree about the metadata. I like pass but it's a flaw for sure. At least it's upfront about it.
Most other issues are covered with pass, like a good android app etc etc.
You could always use pass-tomb, which is an extension that stores the entire tree encrypted.
As I mentioned further up, pass tomb needs to be installed separately (which is not trivial depending on your distro) and is clunky to use. AFAIK it also cannot be used to encrypt the password database on Android.
It also really bugs me that an important security feature like this one is not the default.
Re:KeePassXC 2.4.3
by alexnewman on Wednesday June 12, 2019 @01:16PM
(#20166958)
tomb seems fine on ios and android. I don't use it though
Re:KeePassXC 2.4.3
by alexnewman on Wednesday June 12, 2019 @01:17PM
(#20166972)
This is a common claim, and besides that fact that tomb fixes it and is supported on all distributions, I'm not convinced it's a problem. What's the threat model? That folder should be 700 anyway? Or is this just paranoia?
Re:KeePassXC 2.4.3
by alexnewman on Wednesday June 12, 2019 @06:07PM
(#20169844)
but exposes to who?
Another thing I like about keepassxc is that it has lots of features. It comes with a flexible passwird generator, has a friendly GUI UI, can be integrated to the web browser using an extension, and there are compatible android apps you can use on your phone.