4 ms·

I do not and never will trust cloud storage of credentials.

• WorldMaker 2y ago
  Microsoft's interesting approach here with Authenticator is that they don't expect you to trust one cloud with all your credentials, they are hoping that you can trust two clouds with partial information. They've (allegedly) got some variant of Shamir's Sharing where some of the data is encrypted in OneDrive and some of it is encrypted in iCloud or Google Drive depending on which phone you use. That's (supposed to be) why there is that "phone-type lock-in" on the automatic backups/transfers because the cloud with the most phone-native/device-specific encryption is phone-vendor dependent today.
• UltraSane 2y ago
  Do you trust VPNs? Because they are the same idea with a slight twist. VPNs encrypt data before it leaves your computer and decrypts it when it arrives at the destination. 1Password and the like encrypt data before it leaves your computer, stores it for however long you want, and then decrypts it when it the data is copied to your computer.
  • recursive 2y ago
    VPNs use (I think) some kind of synchronous key-exchange handshake. That doesn't work with storage part in the middle.
    • UltraSane 2y ago
      1Password's security model is pretty well thought out. The goal is to make it as impossible to decrypt the data you are storing as possible. https://support.1password.com/1password-security/ https://support.1password.com/1password-security/