search

adur1990 / Pass-for-macOS

macOS wrapper for pass, the standard UNIX password manager
BSD 3-Clause "New" or "Revised" License
112 stars 8 forks source link

Get rid of the sanbox #8

Closed adur1990 closed 4 years ago

adur1990 commented 4 years ago

Remove the sandbox from the host app for multiple reasons. First, due to the sandbox, the user had to import their private key to Passafari. This required multiple steps, including exporting the private key to the ASCII armor format. Additionally, the user had to specify the path to their password store. And finally, Passafari had to handle the passphrase for the private key. That was very ugly and I did not like it. The main reason why the sandbox is gone now is that Passafari used a PGP Swift library, which can not handle elliptic curve keys. That was the tipping point to remove the sandbox to be able to let pass handle the password decryption. This is more secure and more convenient for both, the developer and the user.

adur1990 commented 4 years ago

Was implemented in Pull Request #15.