-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Labels
Description
For logged in user:
- User enters password (it is never sent to the server).
- Browser generates key based on that password.
- Browser encodes pass entries using that key before sending them to the server
- It also decodes pass entries received from the server using same key
- The key can be stored in the local storage
- The login password should be encoded as well, but is it safe to encode original password with that key? Alternative is to split original password into two parts, first part is used to generate key and second part is encoded using that key and then used as login password
For guests:
- Hm, nothing is changed here
For signup:
- Login password should be generated as above