3 ms·
I've been interested in migrating to bitwarden for a while, but I've been hesitant because I don't know how much I can trust it. Mostly, I was looking for an in
by davidcuddeback 9y ago
I've been interested in migrating to bitwarden for a while, but I've been hesitant because I don't know how much I can trust it. Mostly, I was looking for an independent security audit. I took another look today and found a GitHub issue on the subject [1] and they're working with researchers on HackerOne [2].
[1] https://github.com/bitwarden/core/issues/27 https://github.com/bitwarden/core/issues/27
[2] https://hackerone.com/bitwarden https://hackerone.com/bitwarden
- tptacek 9y agoRunning a bug bounty is not the same thing as getting an independent security audit.
- koolba 9y agoThat's quite the understatement.
- davidcuddeback 9y agoYes, but there's discussion in the issue that I linked to about raising funds for an independent audit.