4 ms·
Mozilla/Firefox uses HIBP. (1) so does gopass. So you're saying that because some browsers use their vendors database, it suddenly becomes obsolete? > Many of
by Xylakant 6y ago
Mozilla/Firefox uses HIBP. (1) so does gopass. So you're saying that because some browsers use their vendors database, it suddenly becomes obsolete?
> Many of the security outfits and large tech vendors are doing it already.
Certainly, not doing so would be negligent. But that, too, doesn't make HIBP obsolete - there's value in having such a database that's openly queryable via an API and under independent and trusted stewardship.
HIBP also offers features that go beyond what a browser/password manager can do: It offers monitoring for entire domains that you manage. I have all our domains that we're using for email registered at HIBP.
(1) https://blog.mozilla.org/futurereleases/2018/06/25/testing-firefox-monitor-a-new-security-tool/ https://blog.mozilla.org/futurereleases/2018/06/25/testing-f...