Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Using PGP sounds fine, but why trust a random (ha) website more than you trust a browser plugin?

Even though you generated a bunch (up to 100), what is to stop random.org from storing every one of those? Much better to just use pwgen or similar.

1Password allows you to sync the encrypted file via dropbox, so if you lose your access you'll still have the encrypted file, you just won't have any updates. And if you can't trust the browser plugin, you can't trust your browser either and no password scheme will help.



  | And if you can't trust the browser plugin, you
  | can't trust your browser either
Depends. Adding plugins extends the attack surface area. Also, the plugin author(s) may not be as diligent at stamping out bugs/security holes as the browser developer(s).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: