Hacker News new | ask | show | jobs
by ComodoHacker 3551 days ago
>you can access them anywhere with it and does not need to store anywhere

But you have to carry the database with you anyway and have to store somewhere. So what's the point of having database with everything but passwords?

And you still need the database encrypted, because you don't want to give the attacker your usernames, emails, recovery answers and other stuff, do you?

1 comments

Maybe the point is that you do not need to store the database securely, that you can store it openly, as long as the certificate used to generate the passwords is kept secret.

But you probably want to keep the meta info of what sites you have access to secret to.

So I don't know why this is better than simply use the certificate to encrypt the database.

But maybe I did not understand how it works.