3 ms·
If talking to a typical person I wouldn’t assume they would stick with a method like pass, or a synced keepass file (methods I like just fine personally.) UI af
by 1123581321 6y ago
If talking to a typical person I wouldn’t assume they would stick with a method like pass, or a synced keepass file (methods I like just fine personally.) UI affordances and multi-device convenience aren’t just fun, they make good security easier for people who are tired or in a hurry.
- tialaramex 6y agoPassFF gives me a UI affordance (password dialogs on web sites in my Firefox get an icon, and context UI menus to auto-fill from pass) and I automatically synchronise the git repo to an Android phone that likewise has affordances. They're nicer in some alternatives like 1password but they aren't absent in the pass ecosystem and of course I can customise these as I prefer (indeed one of my patches is landed in PassFF so I no longer run a fork)
- 1123581321 6y agoYes, it’s not that they don’t exist, but more that the burden is on the user to be aware of them, implement consistently on all devices and perform a degree of maintenance. Generally, speaking about users in aggregate, that is less conducive to good security practices in the long run than one nice, maintained piece of software with multiple clients and a team keeping sync running well. There’s a meta-affordance to consider, if you will.