Cryptopathic: The situation at LastPass may be worse than they are letting on

Re:Cryptopathic: The situation at LastPass may be worse than... by fsckboy on Saturday December 24, 2022 @12:16AM (#34114214)

> safe and secure with end-to-end encryption for all Vault data, including website URLs

end-to-end encryption means something like https, it's a communication quality between trusted parties

https://www.ibm.com/topics/end-to-end-encryption

[ Parent | on HN ]

Re:Cryptopathic: The situation at LastPass may be worse than... by saurik on Saturday December 24, 2022 @12:17AM (#34114218)

I would hope not... that term should be reserved to indicate that the data is encrypted on one of your devices and is merely passed encrypted through their servers to your other devices.

[ Parent | on HN ]

Re:Cryptopathic: The situation at LastPass may be worse than... by kaoD on Saturday December 24, 2022 @03:57AM (#34115176)

Unless I misunderstood you, the article directly contradicts your point:

> Password managers [...] In this case, however, the user is on both endpoints and is the only person with a key.

[ Parent | on HN ]