Design flaws of password managers

Re:Design flaws of password managers by surfsvammel on Sunday January 03, 2021 @01:54AM (#25620097)

I don’t fully understand the critique. I host a Bitwarden instance myself, and it should only be accessible from my home network. When I’m out and about I VPN home, so I still have access to my password manager as well.

This setup has worked great so far.

[ Parent | on HN ]

Re:Design flaws of password managers by number6 on Sunday January 03, 2021 @03:36AM (#25620485)

Why do you use VPN opposed to just TLS? Transportation wise it should be as secure or am I mistaken?

[ Parent | on HN ]

Re:Design flaws of password managers by panta on Sunday January 03, 2021 @03:57AM (#25620581)

Only if you do mutual authentication I guess.

[ Parent | on HN ]

Re:Design flaws of password managers by number6 on Sunday January 03, 2021 @04:04AM (#25620604)

That was my guess too - significant lower attack surface.

I am thinking about a VPN setup myself but most of my services are public facing anyway...

[ Parent | on HN ]