4 ms·
It's a tradeoff. You get that advantage, but then you open yourself up to phishing attacks that browser plugins avoid by checking the domain. My ideal would b
by chowells 8y ago
It's a tradeoff. You get that advantage, but then you open yourself up to phishing attacks that browser plugins avoid by checking the domain. My ideal would be a browser plugin that sends the domain, and nothing more, to a standalone process.
- tempay 8y agoThis is how 1Password works
- PurpleRamen 8y agoA bit more must still be done. The browser-plugin must find the fields to fill with the data. It must also allow adding new entrys or changing existing entrys. Actually finding the correct username-field seems to be slightly more complex on a bad designed page, because it has no special type like the password-field. Oh, do we know whether it's really just a simple passwordmanager, and not also some autofill-manager, session-restorer, or other security/comfort-snakeoil?
- cyphar 8y agoThat's how KeePassXC works. And in addition, KeePassXC will prompt you and tell you what passwords are going to be provided to your browser.