4 ms·
Thankfully it looks like it's not 1Password, who seem to use AWS CloudFront.
by davb 10y ago
Thankfully it looks like it's not 1Password, who seem to use AWS CloudFront.
- silencio 10y agotaviso called out 1Password in the initial tweet, although that still leaves room for other password managers too: https://twitter.com/taviso/status/834900838837411840 https://twitter.com/taviso/status/834900838837411840
- jeremygeros 10y agoAccording to Tavis Ormandy's twitter post it was 1Password, https://twitter.com/taviso/status/834900838837411840 https://twitter.com/taviso/status/834900838837411840
- Pils 10y ago1Password's blog post responding to this incident: https://blog.agilebits.com/2017/02/23/three-layers-of-encryption-keeps-you-safe-when-ssltls-fails/ https://blog.agilebits.com/2017/02/23/three-layers-of-encryp...
- Trundle 10y agoTavis specifically named 1Password, was that wrong? https://twitter.com/taviso/status/834900838837411840 https://twitter.com/taviso/status/834900838837411840
- artursapek 10y agoI just checked them too, but they may have just switched over.
- chris_7 10y agoI am confused - why is 1Password is using anything but iCloud or Dropbox? Those are the only options I see (and "Folder" which is presumably just local).
- ceejayoz 10y agoTheir Teams product has a web-based console for granting users access to vaults: https://1password.com/teams/ https://1password.com/teams/
- scott_karana 10y agoThey have "for Teams/Families" options now that appear to use a proprietary, server-side sync, instead of the safer guarantees of the traditional client.
- floatboth 10y agoIt's still very safe. They do not rely on TLS for protection, they actually send already encrypted data over TLS.