DEV Community

Discussion on: Q Vault: An open source secret manager

Collapse
 
tarialfaro profile image
Tari R. Alfaro

2) It's debatable.

3) It is not the password manager's job to sync files. Let the user deal with that. Save it to a file and call it that. Stop trying to do everything. Do one thing, and do it well.

Collapse
 
wagslane profile image
Lane Wagner

2) definitely debatable. Security is a scale.

3) It just saves to a file by default. We like that it has the ability to sync to the cloud backend within the app (optionally) and handle conflicts between local and server.

Collapse
 
tarialfaro profile image
Tari R. Alfaro • Edited

I guess it's fine to have a built-in syncing feature, but it divides your attention. You should be focusing on securing the secrets, rather than syncing files and checking for conflicts.

Users could use NextCloud, DropBox, Syncthing, etc. There are already existing solutions. Just sync the file and let those solutions handle conflicts.

Thread Thread
 
wagslane profile image
Lane Wagner

Yup. And they can totally do that. Don't enable the sync to cloud option and just backup your own files. easy as pie.

Thread Thread
 
nathilia_pierce profile image
Nathilia Pierce

I agree with both of you, however I think having additional features divides your attentions and increases the complexity of the project. Although it's a really good feature for non-tech savvy users.