2 ms·
It's a choice on the user to weaken the encryption. I don't use Bitwarden, but if they communicate that properly to the user, it's a valid compromise for conven
by prophesi 4y ago
It's a choice on the user to weaken the encryption. I don't use Bitwarden, but if they communicate that properly to the user, it's a valid compromise for convenience-versus-security.
- yazzku 4y agoThis doesn't answer the question. Why is there a choice to encrypt something when it's completely unnecessary (according to their threat model)? No point in building unnecessary complexity into software, especially software meant for security.
- prophesi 4y agoThe client-side lock of 5 PIN attempts solves the much more common threat model the layman is concerned with.