Re:Show HN: Instantly pass your passwords securely
by mattigames on Tuesday November 12, 2019 @10:03AM
(#21514609)
Yeah, in its current implementation it isn't secure, but if you added SRI checks for each CSS and SCRIPT link and then converted the site to a data:text/html link to be added to the user's bookmark bar it would be secure (in the sense that after auditing the code once you can be sure it cannot be changed)
[ Parent
| on HN ]
Re:Show HN: Instantly pass your passwords securely
by hagreet on Tuesday November 12, 2019 @10:55AM
(#21515050)
I think the most important point is, that this solution requires a way to securely transmit the generated link. As described in another comment by @ryandvm this has two advantages over transmitting the password directly:
1. It won't show up in logs or be otherwise accidentally stored.
2. If the link expires after a single use you get security in the covert model. However, this comes with problems because some tools like virus scanners automatically hit links.