3 ms·
Not defending it but this was always a known, though not massively publicised, issue with the 1password format. I seem to recall that the original justificatio
by aidos 11y ago
Not defending it but this was always a known, though not massively publicised, issue with the 1password format.
I seem to recall that the original justification was that it allowed for checking to see if 1p had a login for the current site without having to ask for your password to decrypt the db.
My understanding is that the new format addresses the issue, but it hasn't been rolled out to the dropbox sync yet.
Hopefully the noise here will push that ticket to the top of their priority list :)
http://taoofmac.com/space/blog/2011/04/28/2233 http://taoofmac.com/space/blog/2011/04/28/2233
- Velox 11y agoThat's the hope with the noise. Agile keychain is old and shouldn't be used. I just want them to use OPVault by default and tell users the risks they take with Agile keychain.
- kobayashi 11y agoI remember those days - using the Safari extension could display login options to a site before a Master Password was entered. It always bothered me but I wasn't tech-savvy and security conscious enough back then to look into it. When that possibility ended, I was relieved - wrongfully, I now see.