News for hackers. Stuff that matters.

A comment on The “security.txt” proposal reached last step in the IETF process. Parent comment

Re:The “security.txt” proposal reached last step in the IETF... by closeparen on Wednesday December 11, 2019 @07:30PM (#21768273)
The browser is, the passwords manager is on the other end of an IPC mechanism with a hopefully small and well-defined interface.
[ Parent | on HN ]
Re:The “security.txt” proposal reached last step in the IETF... by daxelrod on Saturday December 14, 2019 @10:25AM (#21789905)
My point is that it is possible for your password manager to sandbox regex execution at least as well as your browser does.

I totally agree with your concerns about scope creep increasing the attack surface.

[ Parent | on HN ]