6 ms·

Store my keychain on the iCloud, eh? Is this going to be the default behaviour now? If so, I guess I'm abandoning Apple faster than I thought I would, a day o

Store my keychain on the iCloud, eh? Is this going to be the default behaviour now? If so, I guess I'm abandoning Apple faster than I thought I would, a day or so ago .

jiggy2011 13y ago
I'm not a Mac user, but isn't the keychain encrypted?
- haxxorfreak 13y ago
  Yes, the keychain is encrypted with your OS X user login password and only unlocked on login. I imagine this will still be the case as Apple mentioned AES256 encryption on their iCloud Keychain slide, though they could change it to use your Apple ID password if they plan on having mobile device support.
  - pooriaazimi 13y ago
    > Yes, the keychain is encrypted with your OS X user login password and only unlocked on login The "login" keychain is encry..... (the rest of your sentence). You can have many more keychains, and they can have far more sophisticated passphrases. I have an "Internet Identities" keychain (for iCloud, Gmail, Dropbox, VPSs, Github, ...) that has a very long passphrase and is not unlocked at the login, nor it stays open after you enter the password (so, if Safari asks for the password and I enter it, the keychain doesn't just stay "open" for all apps to feast upon).
  - nodata 13y ago
    So let's see... in Firefox I have FIVE apple logins saved, because they can't decide on which url to use: * appleid.apple.com * daw.apple.com * id.apple.com * secure1.store.apple.com * secure2.store.apple.com If they have trouble getting something as simple as that right, I'd like them to stay away from my keychain.
    - meepmorp 13y ago
      I don't think Firefox saves logins in the OS X keychain, and mapping which credentials go with which urls is something that Firefox is responsible for, not Apple.
      - nodata 13y ago
        Apple doesn't have a consistent single login url. Firefox isn't to blame for that.
    - smackfu 13y ago
      That seems like a fault of Firefox that it can't wildcard password storage. That situation works in 1Password.
- jld 13y ago
  Yes, 256 bit AES. It's unknown how many of those bits the NSA knows already.
JosephBrown 13y ago
Lots of people are already doing this with 1Password either in iCloud or on Dropbox. As long as it's encrypted with the appropriate algorithms, what's the issue?
- cake 13y ago
  Yes or https://lastpass.com/ https://lastpass.com/ encrypted and free. Works wonders.
  - zevyoura 13y ago
    *free for desktop use; you do need to pay to use it on mobile.
- deleted 13y ago
  [deleted]
aegirth 13y ago
This is just them doing a 1Password.
- gte910h 13y ago
  And with 1Password being "broken" for some versions this spring, I'm not entirely bothered by this latest sherlocking.
Osiris 13y ago
They have 'suggested passwords' feature. It sounds a lot like 1Password, but is there going to be a PC client or web client to access those passwords? I wouldn't dare use it if I was on another machine I hope (I have a mix) and not have access to my passwords. If it's Mac-only, that's going to be a problem.
coldtea 13y ago
Don't let the door hit you on your way out. I mean, you could tell us WHY you think it's a bad idea. Informing us of that you'll leave OS X? We could not care less.
- seclorum 13y ago
  Because I'm the kind of guy who doesn't want to share his keychain if its not necessary, is why. Its not necessary unless I reason to share a keychain .. and .. having this choice being taken away from me would be a suitable reason to abandon the platform.

Store my keychain on the iCloud, eh? Is this going to be the default behaviour now? If so, I guess I'm abandoning Apple faster than I thought I would, a day or so ago .

jiggy2011 13y ago

I'm not a Mac user, but isn't the keychain encrypted?

haxxorfreak 13y ago
Yes, the keychain is encrypted with your OS X user login password and only unlocked on login. I imagine this will still be the case as Apple mentioned AES256 encryption on their iCloud Keychain slide, though they could change it to use your Apple ID password if they plan on having mobile device support.
- pooriaazimi 13y ago
  > Yes, the keychain is encrypted with your OS X user login password and only unlocked on login The "login" keychain is encry..... (the rest of your sentence). You can have many more keychains, and they can have far more sophisticated passphrases. I have an "Internet Identities" keychain (for iCloud, Gmail, Dropbox, VPSs, Github, ...) that has a very long passphrase and is not unlocked at the login, nor it stays open after you enter the password (so, if Safari asks for the password and I enter it, the keychain doesn't just stay "open" for all apps to feast upon).
- nodata 13y ago
  So let's see... in Firefox I have FIVE apple logins saved, because they can't decide on which url to use: * appleid.apple.com * daw.apple.com * id.apple.com * secure1.store.apple.com * secure2.store.apple.com If they have trouble getting something as simple as that right, I'd like them to stay away from my keychain.
  - meepmorp 13y ago
    I don't think Firefox saves logins in the OS X keychain, and mapping which credentials go with which urls is something that Firefox is responsible for, not Apple.
    - nodata 13y ago
      Apple doesn't have a consistent single login url. Firefox isn't to blame for that.
  - smackfu 13y ago
    That seems like a fault of Firefox that it can't wildcard password storage. That situation works in 1Password.
jld 13y ago
Yes, 256 bit AES. It's unknown how many of those bits the NSA knows already.

JosephBrown 13y ago

Lots of people are already doing this with 1Password either in iCloud or on Dropbox. As long as it's encrypted with the appropriate algorithms, what's the issue?

cake 13y ago
Yes or https://lastpass.com/ https://lastpass.com/ encrypted and free. Works wonders.
- zevyoura 13y ago
  *free for desktop use; you do need to pay to use it on mobile.
deleted 13y ago
[deleted]

aegirth 13y ago

This is just them doing a 1Password.

gte910h 13y ago
And with 1Password being "broken" for some versions this spring, I'm not entirely bothered by this latest sherlocking.

Osiris 13y ago

They have 'suggested passwords' feature. It sounds a lot like 1Password, but is there going to be a PC client or web client to access those passwords? I wouldn't dare use it if I was on another machine I hope (I have a mix) and not have access to my passwords. If it's Mac-only, that's going to be a problem.

coldtea 13y ago

Don't let the door hit you on your way out. I mean, you could tell us WHY you think it's a bad idea. Informing us of that you'll leave OS X? We could not care less.

seclorum 13y ago
Because I'm the kind of guy who doesn't want to share his keychain if its not necessary, is why. Its not necessary unless I reason to share a keychain .. and .. having this choice being taken away from me would be a suitable reason to abandon the platform.