Verification on lastpass.com about lastpass-cli HOT 10 CLOSED

+1

from lastpass-cli.

Perhaps keybase.io could help to establish that trust?

from lastpass-cli.

A message on the primary site would be plenty for me

On 23 October 2014 6:44:43 PM AEDT, Sam [email protected] wrote:

Perhaps keybase.io could help to establish that trust?

---

Reply to this email directly or view it on GitHub:
#14 (comment)

Sent from my Android phone with K-9 Mail. Please excuse my brevity.

from lastpass-cli.

I'd prefer not to depend on any more third parties. Using github is bad enough, but for 'trust once' I'll accept it.

On 23 October 2014 6:44:43 PM AEDT, Sam [email protected] wrote:

Perhaps keybase.io could help to establish that trust?

---

Reply to this email directly or view it on GitHub:
#14 (comment)

Sent from my Android phone with K-9 Mail. Please excuse my brevity.

from lastpass-cli.

There is this at least:
http://blog.lastpass.com/2014/10/open-sourced-lastpass-command-line.html

from lastpass-cli.

Wait, the official lastpass blog is served over http?

I would have expected them to be running TLS everywhere.

• Daniel

On Oct 24, 2014, at 12:52 AM, Bob Copeland [email protected] wrote:

There is this at least:
http://blog.lastpass.com/2014/10/open-sourced-lastpass-command-line.html http://blog.lastpass.com/2014/10/open-sourced-lastpass-command-line.html
—
Reply to this email directly or view it on GitHub #14 (comment).

from lastpass-cli.

Unfortunately the blog is on Google blogger, which AFAIK doesn't support https. Everything on the main website is https, though (and uses HSTS).

from lastpass-cli.

For most services I use that would be plenty of verification.

For anything this sensitive, it's got to be delivered over TLS.

from lastpass-cli.

FYI, we also have posted an article on our helpdesk site:
https://helpdesk.lastpass.com/features/lastpass-command-line-application/

from lastpass-cli.

Closing on the basis of boblastpass' comment

from lastpass-cli.