Re:1Password: Standalone / Local Vault Option Gone?
by bwoodruff on Friday July 12, 2019 @12:43PM
(#20422070)
Hi lolsal. Ben from 1Password here. Implementation details can be found here: https://1pw.ca/whitepaper If you have any questions our security team would be happy to elaborate. They can be reached at [email protected]
Re:1Password: Standalone / Local Vault Option Gone?
by lolsal on Friday July 12, 2019 @02:58PM
(#20423366)
I think it's awesome that you publish a whitepaper, but it's just a whitepaper, not source. It doesn't prove anything.
Edit: also there seems to be a lot of this:
> We’re sorry. This section of this document is not yet ready. Any- thing you see in this section is at most an outline of things to come.
Re:1Password: Standalone / Local Vault Option Gone?
by bwoodruff on Friday July 12, 2019 @03:44PM
(#20423786)
We're offering a (mostly) closed source solution. You can evaluate the source for the web app, and the browser extensions. If your argument is that folks shouldn't ever consider using something closed source then obviously 1Password is probably not going to be a good fit and we're at a bit of an impasse.
> Edit: also there seems to be a lot of this:
Some, yes. I'm not sure I'd say 'a lot', but yes, it is a work in progress. Our security team should be able to elaborate on any points that we have yet to detail, though, if you're interested.
Re:1Password: Standalone / Local Vault Option Gone?
by 33Backpack33 on Sunday July 14, 2019 @07:15PM
(#20436892)
I've confirmed it because you can see the data that the web browsers sends and it was encrypted. I've also tested this on LastPass and Bitwarden and from what I can see 1Password does it the best.
Do we know this is true? I assume it is, but I haven't checked the source or verified that I can encrypt/decrypt my data with my key, or that there isn't a master key that 1password has that can access it.