3 ms·
signal desktop keeps database keys in the os keystore via electron safestorage api on linux that’ll be kwallet or something, on mac it’s the keyring. it’s as s
by ruined 1y ago
signal desktop keeps database keys in the os keystore via electron safestorage api
on linux that’ll be kwallet or something, on mac it’s the keyring. it’s as secure as your password manager
edit: okay, you’re right, on windows it’s useless lol https://www.electronjs.org/docs/latest/api/safe-storage https://www.electronjs.org/docs/latest/api/safe-storage
> [on Windows] content is protected from other users on the same machine, but not from other apps running in the same userspace.
- lovetox 1y agoIt's not different on Linux, every App can access any key in kwallet. To make this not possible the os would need to generate some kind of unique app id that can access only what it stored. This would probably result in a lot of lost passwords for normal users.