Viewing a single comment thread. View all comments

maumay t1_j1n0kv2 wrote

Reply to comment by sleepybrett in The Lastpass hack was worse than the company first reported by glawgii

Do you trust the correct implementation of TLS encryption when your credentials are sent over the internet? What difference is there with trusting the correct implementation of password encryption?

1

sleepybrett t1_j1n61mr wrote

I can verify the TLS implimentation in my browser. I do not have access to 1passwords client and server apps source code.

1

maumay t1_j1nc0xy wrote

Ok, like I mentioned there are open source password manager like bitwarden whose source code is regularly audited and which can be verified by anyone.

1

sleepybrett t1_j1ndo7s wrote

I currently use bitwarden because I can host my own backend for it.

1