pfn/keepasshttp
View on GitHub ↗ ★ 2,040 JavaScript
KeePass plugin to expose password entries securely (256bit AES/CBC) over HTTP
6 mentions on Hacker News by 5 people: 1 story, 5 comments · first 2016-02-25 · latest 2018-04-01
20082026
-
…You can have flaws in the implementations on in plug-ins, for example in the http KeePass plugin ( https://github.com/pfn/keepasshttp/issues/258 ).
comment by hackandtrip · 2018-04-01 · in Have I Been Pwned Is Now Partnering with 1Password -
True, but there are a slew of security issues (and unknowns) with KeePassHttp: https://github.com/pfn/keepasshttp/issues/258 https://github.com/keepassxreboot/keepassxc/issues/147 I've been looking for a alternative with somewhat parity…
comment by compuguy · 2017-03-23 · in LastPass: Security done wrong -
KeepassHttp is not even a little bit secure if run over a network, see for example: https://github.com/pfn/keepasshttp/issues/258 It's probably fine so long as both your 'client' and 'server' are on localhost, but it'll probably never be…
comment by nialo · 2016-08-26 · in Dropbox prompts password resets -
▲ 3
KeePass plugin to expose password entries securely over HTTPstory by mafro · 2016-07-28 · 0 comments
-
Be careful about browser integration https://github.com/pfn/keepasshttp/issues/258
comment by Quiark · 2016-07-27 · in LastPass autofill exploit -
…Don't enable remote connections to the KeepassHttp browser integration: there's a gaping hole https://github.com/pfn/keepasshttp/issues/258
comment by Quiark · 2016-02-25 · in KeeWeb: Unofficial KeePass web and desktop client