Multi-User Password Database

From: Bright (brightwell_151_at_yahoo.co.uk)
Date: 08/27/04

  • Next message: DJ: "SP2"
    Date: 27 Aug 2004 05:36:04 -0700
    
    

    DEar All

    I posted an email to this group (ages ago) asking whether anyone knew
    of a multi-user password database so that I could have a better way to
    secure admin passwords than an encrypted file.

    I looked for a while but couldn't find onw, but now I've come across a
    product:
    Password Safe and Repository Professional
    http://www.passwordsafe.de/eng/index.htm

    This seems to do much of what I want (it would have been nicer if it
    had a browser frontend) ... the only trouble is I don't know anything
    about the company.

    Have they implmented the encryption securely?
    Have they put an escrow option in there (these things may be put in
    with the genuine intention of providing a support facility but they
    can be abused)
    Maybe the software is being distributed with malicious intent
    (unlikely)

    Has anybody seen an independant report on this software (preferably
    from a reputable body) ... or maybe you've already been through the
    process of debugging the application (to see whether it opens up
    undocumented listeners or tries to phone home).

    Any comments gratefully received.

    >From looking at the demo it looks to be a nice bit of software - I
    hope I can use it.

    Regards

    John


  • Next message: DJ: "SP2"