Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove note about KeePassHTTP being weak #19

Closed
wants to merge 1 commit into from
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 0 additions & 9 deletions project.html
Original file line number Diff line number Diff line change
Expand Up @@ -35,15 +35,6 @@ <h5>Additional Features</h5>
<p> For a full list of new features and changes, have a look at the
<a href="https://github.com/keepassxreboot/keepassxc/wiki/KeePassXC-Changelog">full KeePassXC changelog</a>.

<div class="info">
<h6>A note about KeePassHTTP</h6>
<p>KeePassHTTP is not a highly secure protocol and has certain flaws which allow an attacker to decrypt your
passwords if they manage to intercept communication between a KeePassHTTP server and PassIFox/chromeIPass over a
network connection (see <a href="https://github.com/pfn/keepasshttp/issues/258">here</a> and <a
href="https://github.com/keepassxreboot/keepassxc/issues/147">here</a>). KeePassXC therefore strictly
limits communication between itself and the browser plugin to your local computer. As long as your computer is
not compromised, your passwords are fairly safe that way, but use it at your own risk!
</div>
</div>

<div id="requirements">
Expand Down