Remix.run Logo
▲ warkdarrior 2 hours ago

> Keepassxc and strongbox passkey integrations

Isn't that a single vendor (or two)? How is this not lock-in?

▲Banditoz 2 hours ago | parent | next [-]

KeepassXC at least allows you to export your passkeys should you choose. The people behind passkeys do not like this. https://github.com/keepassxreboot/keepassxc/issues/10407

▲dwaite an hour ago | parent | next [-]

Which changed to KeepassXC looking to support the standarization work to allow passkeys to be moved between user-controlled software products.

The complaint wasn't in allowing credentials to move (that is the point of the CXF and CXP work). The complaint was in having sensitive data in a plaintext file live long-term without any protections. That is also why one of Tim's early recommendations was to require encrypting the file via a passphrase.

▲ylk 2 hours ago | parent | prev | next [-]

This is not accurate. The very first sentence of that issue is:

> Passkeys should never be allowed to be exported in clear text.

and from another comment by the issue creator:

> I don't quite understand why requiring file protection/encryption can't be a temporary minimum bar here.

They're arguing for storing them in encrypted form. That's very much a different argument than arguing against exporting. I'm not taking any sides here, I just think it's bad to so badly misrepresent people's standpoints.

▲Banditoz 2 hours ago | parent [-]

The kdbx format is encrypted on-disk. You need a password to decrypt the database.

▲dwaite an hour ago | parent [-]

That isn't what is being discussed by the issue. The issue was pertaining to an unencrypted export.

▲timmyc123 2 hours ago | parent | prev [-]

Asking that services require you to encrypt your backup file by default to protect against local malware or malicious access is certainly not "The people behind passkeys do not like...allowing you to export your passkeys".

▲Banditoz 2 hours ago | parent | next [-]

keepassxreboot/keepassxc#10407

  [Passkeys] should never be exported in clear text
  Overview
  Passkeys should never be allowed to be exported in clear text.
  [...]
I suppose we have different interpretations of the headline.
▲timmyc123 2 hours ago | parent | prev [-]

maybe read the whole issue?

▲Gander5739 2 hours ago | parent | prev | next [-]

Well, KeePass is self-hosted, and I hadn't heard of strongbox before, but it says on the website:

> Store your data anywhere you like, online or offline. Sync with every major cloud storage provider or your own server over WebDAV or SFTP. Use your Strongbox database with any KeePass compatible client on any platform.

▲willis936 2 hours ago | parent | prev [-]

I use nextcloud to sync my own keepass database across my devices. Both nextcloud and keepassxc are open source.

Please explain how self hosting open source software is locking me into a vendor.

If the sky falls and strongbox ceases working with mac/iOS I can use android and linux. Nobody is locking my lockbox.