Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

lesspass.com as a single page #589

Open
fulldecent opened this issue Jan 20, 2021 · 3 comments
Open

lesspass.com as a single page #589

fulldecent opened this issue Jan 20, 2021 · 3 comments

Comments

@fulldecent
Copy link
Contributor

fulldecent commented Jan 20, 2021

The page lesspass.com is meant to be a single-page web app with the extremely important function of directly accepting people's master passwords.

This is going to sound stupid to some people, but I'll propose it.

In the interest making this page more secure, I recommend that all resources on this page be inlined. As in one HTML file including all style, images (SVG), and everything needed to display it. Possibly one exception is lesspass.js.

This makes it easier to confirm that there are no tricks, no phoning home, no other network requests.


Can be implemented here https://github.com/lesspass/lesspass/tree/master/packages/lesspass-site

@edouard-lopez
Copy link
Member

see #369 for background

@guillaumevincent
Copy link
Member

Yes this is a really good idea.
The only difficulty is in the tooling.

@guillaumevincent
Copy link
Member

@edouard-lopez it's not PWA, it's more inlining everything in one html file. If we can remove the minification at the same time, it's will be very easy for anybody to do an audit. Just download the HTML and check the hash. See between different versions, the changes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants