- No https, agree, its a very old site, but it's not sensitive material that you're submitting. You can check the integrity of the download [0] - Sourceforge,

- No https, agree, its a very old site, but it's not sensitive material that you're submitting. You can check the integrity of the download [0] - Sourceforge, again not ideal but again it has very old beginnings from when Sourceforge was as respected as Github is. You can't blame the developer for the environment changing. Perhaps they're just a stickler for loyalty. I've never had any crapware with Keepass - FAQ - I could't find your reference in the FAQ page [1] - You have one app + plugin with a browser extension from two developers, hardly a mishmash. You know directly who those two developers are. You've no idea who was working on LastPass. I'd say it was more in the bazaar philosophy vs the LastPass cathedral. [0]: http://keepass.info/integrity.html [1]: http://keepass.info/help/base/faq_tech.html