I am confused - why is 1Password is using anything but iCloud or Dropbox? Those are the only options I see (and "Folder" which is presumably just local).
They have "for Teams/Families" options now that appear to use a proprietary, server-side sync, instead of the safer guarantees of the traditional client.
According to Tavis Ormandy's twitter post it was 1Password, https://twitter.com/taviso/status/834900838837411840
1Password's blog post responding to this incident: https://blog.agilebits.com/2017/02/23/three-layers-of-encryp...
taviso called out 1Password in the initial tweet, although that still leaves room for other password managers too: https://twitter.com/taviso/status/834900838837411840
Tavis specifically named 1Password, was that wrong?
https://twitter.com/taviso/status/834900838837411840
I am confused - why is 1Password is using anything but iCloud or Dropbox? Those are the only options I see (and "Folder" which is presumably just local).
Their Teams product has a web-based console for granting users access to vaults: https://1password.com/teams/
They have "for Teams/Families" options now that appear to use a proprietary, server-side sync, instead of the safer guarantees of the traditional client.
It's still very safe. They do not rely on TLS for protection, they actually send already encrypted data over TLS.
I just checked them too, but they may have just switched over.