3 ms·
That’s a big reason why 1Password recommends using native clients, not the Web interface. Page 68 of https://1passwordstatic.com/files/security/1password-white-
by troydavis 5y ago
That’s a big reason why 1Password recommends using native clients, not the Web interface. Page 68 of https://1passwordstatic.com/files/security/1password-white-paper.pdf https://1passwordstatic.com/files/security/1password-white-p... covers that in detail, but the gist is “Use (code-signed) native clients as much as possible.”
- josephcsible 5y agoYes, using a native client would help, since now the server that would need to be compromised is 1Password's build-box, and it'd be much more difficult to get away with targeting only a few specific users with a modified client. What would help a lot more is if the clients were all fully open source with a 100% reproducible build process.