On Thursday, September 17, 2015 at 11:08:53 AM UTC+2, Tobias Beer wrote:
>
> Some good points. So the scores are roughly...
>
> Keepass 10 : TiddlyWiki 1
>
> May I ask what you use?
>

KeePass2 .. It works well with windows and ubuntu. So I can use the same 
password store file for both environments. ... The only problem atm is my 
mobile device :) It uses ubuntu touch. 


There is also one more thing. You wrote: "and maybe TiddlySpot"

TiddlySpot uses basic http with username, password authentication at the 
moment. This mechanism is all plain text. 

So logging on to tiddlyspot on a public wifi is an invitation for a "man in 
the middle <https://en.wikipedia.org/wiki/Man-in-the-middle_attack>" 
attack. 

As I wrote. Most of the time the encryption mechanisms are not the 
vulnerable elements. 

Users and their "bad habbits" are one element. eg: using the same and easy 
to guess passwords for way to many sites. 

... and ... the annual cost and complexity to enable https:// is the second 
element, why the web is still an insecure place. 

--- OT

https://letsencrypt.org/ may be an interesting approach to create free 
certs. ... But the last time I visited the project page, they where not 
finished yet. .. So time to have a new look ;)

-m

-- 
You received this message because you are subscribed to the Google Groups 
"TiddlyWiki" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to tiddlywiki+unsubscr...@googlegroups.com.
To post to this group, send email to tiddlywiki@googlegroups.com.
Visit this group at http://groups.google.com/group/tiddlywiki.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/tiddlywiki/d63c589d-d3ed-4fa4-be34-ee7f65dd93bb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to