5 ms·
I think the point is that we have to trust you, that the passwords are stored encrypted. Right? Or there is a way to see that you are passing the encrypted pas
by ithkuil 16y ago
I think the point is that we have to trust you, that the passwords are stored encrypted.
Right? Or there is a way to see that you are passing the encrypted password and the bookmarklet "decrypts" it locally without passing through your site?
- PawelDecowski 16y agoEncryption and decryption happen on the server. You need to trust me on that. I may implement client-side encryption/decryption. I need to look into it.
- erikano 16y ago>Encryption and decryption happen on the server. You need to trust me on that. So in the event that someone breaks into your server, what keeps them from stealing my unique encryption key the next time I use your service?
- PawelDecowski 16y agoNothing at the moment.