4 ms·
> Don't put in a place where history is saved What risks & attack vectors do you have in mind here? Also, in how far is this an issue with KeePass (whose files
by codethief 2y ago
> Don't put in a place where history is saved
What risks & attack vectors do you have in mind here? Also, in how far is this an issue with KeePass (whose files are encrypted)?
- marcosdumay 2y ago> What risks & attack vectors do you have in mind here? People with deleted passwords not being able to access the old file, or really any kind of mistake being irreversible.
- codethief 2y agoI'm afraid I'm still not following. Isn't the point of having a history precisely to be able to roll back in case of mistakes?
- marcosdumay 2y agoYou don't want a rigid history on the case of some mistake exposing the data. (Like a weak password.) Backups that you can erase work fine, but version control will create trouble.
- codethief 2y agoYeah, rotating the passwords when there is a possibility of a leak would be mandatory of course. (As it should be anyway.)