3 ms·

Could it possibly become any worse? The UI has always been lacking, and functionality has gotten worse over time (e.g. aws-vault cannot actually work without po

Could it possibly become any worse? The UI has always been lacking, and functionality has gotten worse over time (e.g. aws-vault cannot actually work without popping up a prompt window every other minute since a recent update to OSX). Discoverability is poor, there are a hundred keychains ("login", "icloud", "system") and even I as a security conscious IT professional don't know what they mean, god have mercy on the casual user finding their way. Where are which passwords stored? WiFi passwords are stored across multiple chains depending on OS updates, but not migrated across. To view the password of a single item I have to enter my password twice, for some reason: once to.. unlock the keychain, once to unlock the item? Or to allow "keychain" access to the item? What? God, the icloud keychain cannot die soon enough. What a shit show.

ballenf 8y ago
Wow, it's interesting how different people's perspective can be. One of the deciding factors for me switching 100% to iOS and MacOS was the unified keychain across all browsing and apps. For the first time in ever I rarely do password resets in an app. There are a few apps that "brilliantly" roll their own password input fields and those don't work, but they are rare. And a few websites that split the username and password onto separate screens that are kind of hit or miss, but again rare. And on the ios12 beta, the keyboard grabs one-time sms codes and auto-inputs them with one tap. From my layman's perspective I have one keychain and it has everything in it. And it just works 99% of the time. But I don't use it for AWS anything. I don't know or care about the different kinds of keychains -- they just work. Not doubting your experience, just wanted to throw out there another one. I only wish Authy (my current preferred 2 factor token generator) was more integrated with the Apple keyboard, but it has a widget that makes things pretty quick.

ballenf 8y ago

Wow, it's interesting how different people's perspective can be. One of the deciding factors for me switching 100% to iOS and MacOS was the unified keychain across all browsing and apps. For the first time in ever I rarely do password resets in an app. There are a few apps that "brilliantly" roll their own password input fields and those don't work, but they are rare. And a few websites that split the username and password onto separate screens that are kind of hit or miss, but again rare. And on the ios12 beta, the keyboard grabs one-time sms codes and auto-inputs them with one tap. From my layman's perspective I have one keychain and it has everything in it. And it just works 99% of the time. But I don't use it for AWS anything. I don't know or care about the different kinds of keychains -- they just work. Not doubting your experience, just wanted to throw out there another one. I only wish Authy (my current preferred 2 factor token generator) was more integrated with the Apple keyboard, but it has a widget that makes things pretty quick.