3 ms·
> I guess we have to find a different place for our passwords database that can be accessed over unauthenticated HTTP That's a strange sentence. Passwords shou
by JonChesterfield 4y ago
> I guess we have to find a different place for our passwords database that can be accessed over unauthenticated HTTP
That's a strange sentence. Passwords shouldn't go over plain text (e.g. HTTP) and shouldn't be world-readable without authentication. If the database itself is encrypted then you could put it on any web server, even ye olde ftp, as a replacement for this service.
- dewey 4y agoUnauthenticated http != plain text Looks like it's encrypted, so it shouldn't really matter: https://keybase.pub/logandark/passwords.kdbx https://keybase.pub/logandark/passwords.kdbx
- LoganDark 4y agoIndeed, that is it~ we use argon2id with some decent parameters. We may even up the parameters significantly when we switch to our desktop with an overclocked 12400F as a daily driver. -Emily
- LoganDark 4y agoThe purpose is to be able to download the encrypted database onto things like mobile devices that can't do anything like connect to FTP servers. Having a virtual filesystem is convenient because we don't need to do constant shuffling and transferring when updating our database from a computer. "just put it on a normal web server" ignores the rest of the convenience that keybase.pub provided. It provided a virtual file system that can be accessed over plain HTTP. Sure, SSHFS exists but it's terrible and not fault-tolerant at all. Keybase did it way better. -Emily
- JonChesterfield 4y agoAh yes, that I sympathise with. Thank you for clarifying
- JimDabell 4y ago> It provided a virtual file system that can be accessed over plain HTTP. It sounds like you want WebDAV? It’s an extension to HTTP and you can mount it as a folder in most desktop environments without any additional software.
- LoganDark 4y agoOh, interesting, Windows supports it natively and we actually have a server (logandark.net) with WebDAV support. We may look into this actually, thank you! -Emily
- mxuribe 4y agoI don't know your audience of expected users (e.g. just family, friends or customers, etc.)...But have you considered something like nextcloud? As @JimDabell noted, you get WebDav "for free" by using nextcloud....But of course there are other options to sync files.
- LoganDark 4y agoThe reason we liked keybase.pub is because we could just type in https://logandark.keybase.pub/passwords.kdbx https://logandark.keybase.pub/passwords.kdbx to download the database to any of our devices that don't have the fully fledged virtual filesystem. I can't tell if Nextcloud offers any memorable URL like that. -Emily
- mxuribe 4y agoI would say that nextcloud offers what you seek...Since nextcloud would live under a domain name (or subdomain name) that you control, hence ideally such a domain name would be memorable to you, i would say the scenario you noted is possible. Here's the brochure/"marketing-y" link to the nextcloud info around sharing, such as via links: https://nextcloud.com/sharing/ https://nextcloud.com/sharing/ And, here's the more in depth info that goes a little deeper: https://docs.nextcloud.com/server/latest/user_manual/en/files/sharing.html https://docs.nextcloud.com/server/latest/user_manual/en/file... Note: Instead of sharing the file via memorable links, if possible, having each user download the nextcloud client and sync the file that way is more ideal/better/faster...of course, that approach may not align with your use-case. I hope the above helps! Good luck!
- Wingy 4y agoMaybe point a web server at your kbfs mount to make a similar service to keybase.pub but only for your own shared files.