3 ms·
Chrome's password manager, doesn't use HIBP. Neither does Apple's implementation. The barrier to collecting leaked dumps and compiling a database from them is
by starfallg 6y ago
Chrome's password manager, doesn't use HIBP. Neither does Apple's implementation.
The barrier to collecting leaked dumps and compiling a database from them is not that high. Many of the security outfits and large tech vendors are doing it already.
- Xylakant 6y agoMozilla/Firefox uses HIBP. (1) so does gopass. So you're saying that because some browsers use their vendors database, it suddenly becomes obsolete? > Many of the security outfits and large tech vendors are doing it already. Certainly, not doing so would be negligent. But that, too, doesn't make HIBP obsolete - there's value in having such a database that's openly queryable via an API and under independent and trusted stewardship. HIBP also offers features that go beyond what a browser/password manager can do: It offers monitoring for entire domains that you manage. I have all our domains that we're using for email registered at HIBP. (1) https://blog.mozilla.org/futurereleases/2018/06/25/testing-firefox-monitor-a-new-security-tool/ https://blog.mozilla.org/futurereleases/2018/06/25/testing-f...