3 ms·
My biggest hurdle is that attestation exists, which lets organizations like Okta make credible threats to ban open source implementations like KeePassXC, for no
by josephcsible 2y ago
My biggest hurdle is that attestation exists, which lets organizations like Okta make credible threats to ban open source implementations like KeePassXC, for not having enough restrictions on what users can do with their own data. To be clear, I'm not speaking hypothetically: https://github.com/keepassxreboot/keepassxc/issues/10407#issuecomment-1994673954 https://github.com/keepassxreboot/keepassxc/issues/10407#iss...
- riya_hawcx 2y agoYou are absolutely right that attestation introduces challenges, especially for open-source implementations like KeePassXC. While it’s meant to ensure software integrity, it can end up restricting how users interact with their own data, forcing them into locked ecosystems. The issue with traditional approaches, including many that rely on the operating system or hardware for private key storage, is that they limit flexibility and raise concerns over user control and interoperability. There is a growing need for solutions that don’t depend on specific devices or platforms, offering both security and true portability without relying on OS-dependent storage.