7 ms·
This sounds like a neat idea but I have to agree with gruez that this is a disaster waiting to happen. I carry my KeePassX DB on my phone and know it is slight
by madamelic 9y ago
This sounds like a neat idea but I have to agree with gruez that this is a disaster waiting to happen.
I carry my KeePassX DB on my phone and know it is slightly safer than typical cloud providers because it isn't actively being targeted.
That said, I would try this out.
- jopsen 9y agoAn yubikey is certainly better and simpler. Maybe if modern phones have special hardware features where key material can be stored, so that it can't be duplicated.
- arghwhat 9y agoI believe they do.
- iancarroll 9y agoReposting my comment: The iPhone has a secure enclave that does elliptic curve key generation and signing[0] (the key obviously cannot be exported). I'd be surprised if they do not implement that soon; it's not terribly difficult[1]. [0] https://twitter.com/iangcarroll/status/830878517730623492 https://twitter.com/iangcarroll/status/830878517730623492 [1] https://developer.apple.com/documentation/security/1644033-seckeycopykeyexchangeresult?language=objc https://developer.apple.com/documentation/security/1644033-s...