4 ms·
Wouldn't it be possible to create a site that remembers all your passwords but only has them in encrypted form? It would use JavaScript on the browser to encryp
by spolsky 19y ago
Wouldn't it be possible to create a site that remembers all your passwords but only has them in encrypted form? It would use JavaScript on the browser to encrypt and decrypt the passwords (using your master passphrase) before sending them to the server?
- simonw 19y agoClient-side encryption wouldn't protect you against that site turning evil and deciding to steal your passwords - they'd just have to change their code to decrypt your passwords and then post them back to the server.
- spolsky 19y agoBut they could be audited by looking at the JavaScript, so at least you have a way to prove to yourself they're legit.