Hacker News new | ask | show | jobs
by kijin 4906 days ago
The landing page, albeit nicely designed, could be slapped onto virtually any online password manager with minimal modifications. While it does a relatively good job explaining what the product does and why it's important, it doesn't do a particularly good job explaining how Yith is different from all the other password managers that are out there. After all, password management with client-side decryption and cross-device sync isn't exactly news these days.

So, what's special about Yith? What problems does it solve that other password managers such as KeePass, LastPass, etc. don't solve? Here's what I can tell from the landing page:

1. Yith is open-source, whereas some of the alternatives are closed-source.

2. Yith doesn't keep the master password in memory any longer than the time it takes to decrypt a single stored password. Most of the alternatives such as LastPass remember the master password (or the private key that it decrypts) for the duration of your browsing session (or for as long as the standalone app is running) unless you explicitly log out. So Yith might be more secure, but it also has the potential to be rather inconvenient.

What else? Is this a web app that you open in another tab while trying to log into a site? Or does Yith come with plug-ins for popular browsers? The "clients" page only lists a web app.

1 comments

I'm one of the authors of Yith Library and you are right about our landing page not really explaining what makes Yith Library different.

You can read a little bit more about it at my blog http://www.lorenzogil.com/blog/2013/01/13/yith-library/ to understand the reasons about why the product was born.

Having said that, obviously the most different point about Yith Library is its license (GPLv3c) which mean, among other things, you can install it on your server.

We don't have any browser plugins yet so the auto login feature is far from being done.

In the near future I plan to add two important things:

- Another client. Probably a command line utility.

- A sharing passwords feature where you can share a password with a friend or coworker. This would use a combination of asymmetric and symmetric crypto in order to avoid the server to see the master password.

There are many more items in our wishlist, which you can see at https://trello.com/board/yith-library/500ed56c6a349ea1035362...

Anyway, thanks a lot for your valuable feedback.

About the landing page, the link to the github is quite hard to find. Initially I didn't find it, and it was only after reading your comment about installing it on ones own server that I made a second more closer search and found it.

Adding a download link in the footer would make finding that link much much easier.

We added a Github ribbon on the top right corner so hopefully now it is much easier to find the source code.