Re:Bluepass: an open trust no one password manager (fundrais...
by MartinMond on Friday August 09, 2013 @05:19AM
(#6184551)
Have you considered supporting cloud sync? It should be possible to make it secure and it would be a huge convenience.
[ Parent
| on HN ]
Re:Bluepass: an open trust no one password manager (fundrais...
by geertj on Friday August 09, 2013 @05:26AM
(#6184579)
I did consider it, and the Bluepass sync protocol has an option for a node type without an encryption key. Such a node is merely "reflector" of traffic, which can be useful in case you have two disjoint sets of devices that are never on the same LAN.
This could be later addition. However it does decrease the security slightly because now you have to assume that others now have access to your encrypted data. It is still a lot better than the alternatives because still no dictionary attack is possible, you'd have to break RSA to get to it.