4 ms·
It's not clear to me if he likes the web passed browser plugin method. He seems to be talking specifically about small utility applications that perform the ser
by tseabrooks 15y ago
It's not clear to me if he likes the web passed browser plugin method. He seems to be talking specifically about small utility applications that perform the service. Though presumably these connect to a server for syncing.
Would there be any additional security hazard from using last pass and it's plugins verses using a password manager that's not integrated into the browser?
- zwp 15y agoI avoid browser-integrated password stores. The attack surface is larger than a standalone app; your browser is a popular (and historically ripe) target; your browser sees lots of untrusted input from third parties; you manipulate sensitive data with your browser.