3 ms·
Don‘t know if Strongbox is working well? Developed by a single programmer… and no Audits available.
by holigot 2y ago
Don‘t know if Strongbox is working well? Developed by a single programmer… and no Audits available.
- pnw 2y agoThey address that here: https://strongboxsafe.com/support/#reamaze#0#/kb/security-and-privacy/has-strongbox-been-audited-for-security https://strongboxsafe.com/support/#reamaze#0#/kb/security-an... Is Keepassium audited?
- KeePassium 2y agoWe are undergoing the same CASA audit (required to access Google Drive API). And we do have people forking and building the project from source, so one can hope they read what they compile. Strongbox' source code is half-closed (see #784 in their repo) so source-level independent audit is impossible. Otherwise, no. A third-party audit costs like a year of part-time developer, and at this stage the developer is more useful.
- holigot 2y agoWise words! Most of the people think, that Strongboxsafe is an Open Source App, which is definitely not the case! Overall a good app, but if you want true Open Source KeePassium is the app to choose.