4 ms·

BitWarden Secrets Manager is now GA. Sadly no self hosting until the $12/month tier but still very exciting! https://bitwarden.com/products/secrets-manager/#p

by seized 3y ago

BitWarden Secrets Manager is now GA. Sadly no self hosting until the $12/month tier but still very exciting! https://bitwarden.com/products/secrets-manager/#pricing https://bitwarden.com/products/secrets-manager/#pricing

danmur 3y ago
It's weird that it's open source, but you can't self-host it unless you pay. How does that work? "Today, Bitwarden announces the general availability of Bitwarden Secrets Manager, an open source, end-to-end encrypted solution that empowers development teams to easily store, manage, automate, and share secrets at scale."
- Kab1r 3y ago
  It's not open source; it's under a different license unlike the rest of bitwarden which is GPL
- cognomano 3y ago
  At least part of the source code seems to be here: <https://github.com/bitwarden/server/tree/master/src/Core/SecretsManager https://github.com/bitwarden/server/tree/master/src/Core/Sec...>. The license is not clear to me: is the Secret Manager a “Bitwarden server”, or is it “Commercial.Core”? <https://github.com/bitwarden/server/blob/master/LICENSE_FAQ.md https://github.com/bitwarden/server/blob/master/LICENSE_FAQ....>. I hope Bitwarden don’t follow the recent “open source but only if you pay and we unilaterally terminate the contract with you if you exercise the terms of the open source license” approach RedHat is doing lately.
- Aicy 3y ago
  I'm confused since I self host vaultwarden and it works great, what is bitwarden adding?
  - zebracanevra 3y ago
    And it also seems like vaultwarden has no interest in implementing the functionality? I don't get why they don't do a clean-room implementation if they're so worried about licenses.. https://github.com/dani-garcia/vaultwarden/discussions/3368 https://github.com/dani-garcia/vaultwarden/discussions/3368
    - jacooper 3y ago
      But vaultwarden is a full reimplementation anyway?
      - cpach 3y ago
        Vaultwarden does not implement the secrets manager. It does implement the password manager. Vaultwarden does not have 100% of all the features that Bitwarden has. To name an example, SSO is missing: https://github.com/dani-garcia/vaultwarden/pull/3154 https://github.com/dani-garcia/vaultwarden/pull/3154
    - nucleardog 3y ago
      I imagine the issue is maybe more on the UI end. If the UI isn't included in the open source offering, then vaultwarden is going to need to build it out themselves. Their reply mentions it's not in the open source web vault. This aligns with some of the enterprise policies that they've not implemented, in their wiki they're called out for the UI not being open source.

by seized 3y ago

danmur 3y ago

It's weird that it's open source, but you can't self-host it unless you pay. How does that work? "Today, Bitwarden announces the general availability of Bitwarden Secrets Manager, an open source, end-to-end encrypted solution that empowers development teams to easily store, manage, automate, and share secrets at scale."

Kab1r 3y ago
It's not open source; it's under a different license unlike the rest of bitwarden which is GPL
cognomano 3y ago
At least part of the source code seems to be here: <https://github.com/bitwarden/server/tree/master/src/Core/SecretsManager https://github.com/bitwarden/server/tree/master/src/Core/Sec...>. The license is not clear to me: is the Secret Manager a “Bitwarden server”, or is it “Commercial.Core”? <https://github.com/bitwarden/server/blob/master/LICENSE_FAQ.md https://github.com/bitwarden/server/blob/master/LICENSE_FAQ....>. I hope Bitwarden don’t follow the recent “open source but only if you pay and we unilaterally terminate the contract with you if you exercise the terms of the open source license” approach RedHat is doing lately.
Aicy 3y ago
I'm confused since I self host vaultwarden and it works great, what is bitwarden adding?
- zebracanevra 3y ago
  And it also seems like vaultwarden has no interest in implementing the functionality? I don't get why they don't do a clean-room implementation if they're so worried about licenses.. https://github.com/dani-garcia/vaultwarden/discussions/3368 https://github.com/dani-garcia/vaultwarden/discussions/3368
  - jacooper 3y ago
    But vaultwarden is a full reimplementation anyway?
    - cpach 3y ago
      Vaultwarden does not implement the secrets manager. It does implement the password manager. Vaultwarden does not have 100% of all the features that Bitwarden has. To name an example, SSO is missing: https://github.com/dani-garcia/vaultwarden/pull/3154 https://github.com/dani-garcia/vaultwarden/pull/3154
  - nucleardog 3y ago
    I imagine the issue is maybe more on the UI end. If the UI isn't included in the open source offering, then vaultwarden is going to need to build it out themselves. Their reply mentions it's not in the open source web vault. This aligns with some of the enterprise policies that they've not implemented, in their wiki they're called out for the UI not being open source.