Clipperz: Anatomy of a zero-knowledge web application
Clipperz hosts an online password manager that, according to them, you don't have to trust with your private information, since it's all encrypted in your web browser before being sent to and stored on their server. This article talks about the general architecture. Security is provided by their open source JavaScript Crypto Library. Their service is free, and you need only a username and password to get started. Your password is never sent to their server, and they cannot recover it. You can save your private information on your machine, read-only, to make disconnected access possible. I feel no need for an on-line password manager at present, Yojimbo works well for me, but I look forward to future zero-knowledge web applications. Very cool idea.
There's also Clipperz Community Edition, an open source version of the password manager server that you can run on your own web site, with just PHP 5 and MySQL.
Previous Posts:
A New Mossberg American Lever Gun
Grand Theft Society
Heller Decision -- Deeper Analysis
The Capsizing of American Democracy
Lenny Ladner for United States Senate
Eric S. Raymond Returns to the Blogosphere
Git Magic
Rogue Nation
One Man's Memory of the Slow Death of RKBA in Amerika
Darth Barr?