News for hackers. Stuff that matters.

A comment on Show HN: Self-hosted and self-contained web app password manager written in Go. Parent comment

Re:Show HN: Self-hosted and self-contained web app password ... by alpb on Friday January 03, 2020 @01:54PM (#21949054)
Add a security team on top of that. Unless I'm a crypto expert, it's unlikely that I'll use some DIY password manager on my desktop. Also agree that browser support is quite a major reality of password managers today. Unless you can do that, you're basically a "secrets storage".
[ Parent | on HN ]
Re:Show HN: Self-hosted and self-contained web app password ... by jarm0 on Saturday January 04, 2020 @05:38AM (#21954131)
That's a good principle in theory, but how do you know that using any 3rd party password manager is any better? There has been plenty of security problems with all of the major providers as far as I'm concerned.

At least with all these DIY password managers which are open-source you can see all the code, which is not true for any 3rd party custom made solutions.

Also, one of the reasons why I went with libsodium as an encryption solution is the exact same reason - I'm not a cryptograper and libsodium offers an easy and fool-proof API to not mess things up accidentally. This is not true for many other (popular) cryptography solutions.

[ Parent | on HN ]