5 ms·
Right, but they also store the decryption key -- your Inky password. Which is (presumably?) encrypted… somehow? Maybe?
by alexmuller 14y ago
Right, but they also store the decryption key -- your Inky password. Which is (presumably?) encrypted… somehow? Maybe?
- deleted 14y ago[deleted]
- jtheory 14y agoThis would be nice to know, because they're serving as a password-management app for all of your email passwords. Presumably, they would not store your Inky password as well -- instead, they'd store a secure hash, not MD5 or SHA-1, which are built for speed, not security....
- dmbaggett 14y agoIt's more complicated than that. Please see my comments on security elsewhere in the thread. We store a password verifier object -- that's akin to a secure hash, but our authentication model offers better guarantees about protection from man-in-the-middle attacks.