Remix.run Logo
▲ Banditoz 2 hours ago

KeepassXC at least allows you to export your passkeys should you choose. The people behind passkeys do not like this. https://github.com/keepassxreboot/keepassxc/issues/10407

▲dwaite an hour ago | parent | next [-]

Which changed to KeepassXC looking to support the standarization work to allow passkeys to be moved between user-controlled software products.

The complaint wasn't in allowing credentials to move (that is the point of the CXF and CXP work). The complaint was in having sensitive data in a plaintext file live long-term without any protections. That is also why one of Tim's early recommendations was to require encrypting the file via a passphrase.

▲ylk 2 hours ago | parent | prev | next [-]

This is not accurate. The very first sentence of that issue is:

> Passkeys should never be allowed to be exported in clear text.

and from another comment by the issue creator:

> I don't quite understand why requiring file protection/encryption can't be a temporary minimum bar here.

They're arguing for storing them in encrypted form. That's very much a different argument than arguing against exporting. I'm not taking any sides here, I just think it's bad to so badly misrepresent people's standpoints.

▲Banditoz 2 hours ago | parent [-]

The kdbx format is encrypted on-disk. You need a password to decrypt the database.

▲dwaite an hour ago | parent [-]

That isn't what is being discussed by the issue. The issue was pertaining to an unencrypted export.

▲timmyc123 2 hours ago | parent | prev [-]

Asking that services require you to encrypt your backup file by default to protect against local malware or malicious access is certainly not "The people behind passkeys do not like...allowing you to export your passkeys".

▲Banditoz 2 hours ago | parent | next [-]

keepassxreboot/keepassxc#10407

  [Passkeys] should never be exported in clear text
  Overview
  Passkeys should never be allowed to be exported in clear text.
  [...]
I suppose we have different interpretations of the headline.
▲timmyc123 2 hours ago | parent | prev [-]

maybe read the whole issue?