WeAreWizards / passopolis-extensions

Continuation of the extensions code for mitro
GNU General Public License v3.0
81 stars 14 forks source link

Distributed Storage #19

Open amenk opened 8 years ago

amenk commented 8 years ago

Is it possible to set up an own server to store a companies password? Would it mean to re-release all the apps, or could there be a way to autodetect (from the user name) or set the server in an app?

teh commented 8 years ago

You can point the chrome extension to a different server in preferences. Go to the main UI and replace the secrets.html at the end of the URL with preferences.html. E.g.:

chrome-extension://gknclpdgpfkfckamhononecbipkbmpil/html/preferences.html
amenk commented 8 years ago

Okay, thanks for the quick response. But this would require repacking the extension, right? Are there any plans for a distributed structure? Something like jabber usernames ... when logging in with test@example.com it could check DNS if there are passopolis tervers for that domain...

teh commented 8 years ago

The change I mentioned above doesn't require repacking.

We have no plans for distributed storage because it's unclear how to do that cryptographically when sharing secrets with teams. Patches welcome though!

samgaw commented 8 years ago

@amenk if you're talking about service discovery ie. the client automatically finds your passopolis server rather than having to configure it, there's not going to be any easy way to do this.

I don't know of any browser that supports SRV lookups and it's unlikely to happen anytime soon given it wasn't included in the HTTP2 spec.

https://bugs.chromium.org/p/chromium/issues/detail?id=559115

amenk commented 8 years ago

I think there is a way ... just use a well known DNS name and / or file. for example

passopolis.example.org -> has to point to the passopolis server used or www.example.org/passopolis.json -> has info about the passopolis server used