News for hackers. Stuff that matters.

A comment on Key for chromium's encrypted cookies store in Linux is “peanuts”. Parent comment

Re:Key for chromium's encrypted cookies store in Linux is “p... by kuschku on Sunday June 14, 2015 @12:04PM (#9715345)
About the first thing: he means that Google stores them in a way so that they can access the data – instead of doing end to end crypto with a password derived key.
[ Parent | on HN ]
Re:Key for chromium's encrypted cookies store in Linux is “p... by asuffield on Sunday June 14, 2015 @12:17PM (#9715395)
It's only true because he's stuck the words "by default" in there. The button to set a password-based key is in the menu and then it does end-to-end crypto.

If you don't give it a key, it does the best it can with an impossible problem.

[ Parent | on HN ]
Re:Key for chromium's encrypted cookies store in Linux is “p... by kuschku on Sunday June 14, 2015 @01:15PM (#9715607)
Technically, due to having a Google Account, there would be a way for that.

And if you set a master password for Chrome mobile, you can still access everything without this password on desktop chrome, and in reverse.

As you are logged into your Google account anyway, though, they should just use your account identifier as seed for the key if no other option is available.

[ Parent | on HN ]