Skip to content

Instantly share code, notes, and snippets.

@sarciszewski

sarciszewski/INTRODUCTION.md

Last active August 29, 2015 14:05
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save sarciszewski/55772831155dab746195 to your computer and use it in GitHub Desktop.
Save sarciszewski/55772831155dab746195 to your computer and use it in GitHub Desktop.
Download ZIP
Password Manager
Raw
INTRODUCTION.md

Passwords suck, and our password managers aren't much better.

  • LastPass has good UX, but is non-free
  • KeePass is free software, but doesn't integrate with browsers in and of itself
  • 1Password is non-free and their browser integration is "thin"
  • Keeper is non-free

I believe that the infosec community can do better. Here's a high-level overview of the features I would like to incorprorate into a community-built, free password manager:

  • Integrates with Firefox (because Tor Browser Bundle) and Chrome
  • Encrypted locally (never publish keys, only salts/IVs); store in the cloud (ref. TAILS implementation of Tahoe-LAFS for persistent storage?)
  • Anonymous registration
  • Use the browser's proxy settings (for Tor support)
  • Sync/manage SSL Client certificates (something that nobody else does)
  • Maybe also support Android/iOS browsers?

Before I spend too much effort flushing out the granular details, I'm curious what everyone else thinks about this idea.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment