3 ms·
We do this differently at Meldium (YC W13) and reliably provide a way to share passwords without end-users seeing them. The login occurs on the server side and
by borisjabes 13y ago
We do this differently at Meldium (YC W13) and reliably provide a way to share passwords without end-users seeing them. The login occurs on the server side and only the session is transferred to the sharee's browser. Thus, the password is truly never shared or sent down over the wire.
- ryanto 13y agoThis is interesting and certainly solves the problems mentioned in the article. However, it does introduce a whole bunch of new attack vectors. Have you thought about the idea of selling the product as a machine that clients can run in house? Something that is only accessible to them, similar to how GitHub enterprise works.
- borisjabes 13y agoWe definitely intend to provide the secure vault component as something you can host internally (exactly like GitHub Enterprise).