Bitwarden: Free, open-source password manager

Re:Bitwarden: Free, open-source password manager by cies on Wednesday January 19, 2022 @08:36AM (#29993440)

So I'm reading on pg 22. The red block. How hard is it for 1Pass --basically a mandated MITM-- to send a false request to Alice when Bob made a request?

That whitepaper is a piece of marketing text. Not saying their audit did not take place. But they are soooooo powerful in their own system that they basically have access to everything.

BitWarden: not so much.

[ Parent | on HN ]

Re:Bitwarden: Free, open-source password manager by a10c on Thursday January 20, 2022 @05:09AM (#30006952)

> How hard is it for 1Pass --basically a mandated MITM-- to send a false request to Alice when Bob made a request?

Alice is the one that initiates the request. She owns the vault being shared and encrypts it with Bob's pre-shared public key.

[ Parent | on HN ]