{"action":"created","issue":{"url":"https://api.github.com/repos/palant/pfp/issues/62","repository_url":"https://api.github.com/repos/palant/pfp","labels_url":"https://api.github.com/repos/palant/pfp/issues/62/labels{/name}","comments_url":"https://api.github.com/repos/palant/pfp/issues/62/comments","events_url":"https://api.github.com/repos/palant/pfp/issues/62/events","html_url":"https://github.com/palant/pfp/issues/62","id":287753400,"number":62,"title":"Master password security guidelines","user":{"login":"FedericoYundt","id":30194923,"avatar_url":"https://avatars3.githubusercontent.com/u/30194923?v=4","gravatar_id":"","url":"https://api.github.com/users/FedericoYundt","html_url":"https://github.com/FedericoYundt","followers_url":"https://api.github.com/users/FedericoYundt/followers","following_url":"https://api.github.com/users/FedericoYundt/following{/other_user}","gists_url":"https://api.github.com/users/FedericoYundt/gists{/gist_id}","starred_url":"https://api.github.com/users/FedericoYundt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/FedericoYundt/subscriptions","organizations_url":"https://api.github.com/users/FedericoYundt/orgs","repos_url":"https://api.github.com/users/FedericoYundt/repos","events_url":"https://api.github.com/users/FedericoYundt/events{/privacy}","received_events_url":"https://api.github.com/users/FedericoYundt/received_events","type":"User","site_admin":false},"labels":[{"id":516704063,"url":"https://api.github.com/repos/palant/pfp/labels/worksforme","name":"worksforme","color":"808080","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2018-01-11T11:29:07Z","updated_at":"2018-02-07T19:57:40Z","closed_at":"2018-01-11T12:58:35Z","author_association":"NONE","body":"Recently similar solution was posted on reddit [1] and many people were concerned about master password security [2]. There is a question about how strong master password have to be and how users will know if it's secure enough.\r\n\r\nI wonder if easypasswords can implement something like password entropy meter [3]. Alternatively it can document password security guidelines or link to something already available.\r\n\r\n[1] https://medium.com/@cretezy/masterpassx-a-better-stateless-password-generator-a06b93b9aa8c\r\n[2] https://www.reddit.com/r/netsec/comments/7mymqw/masterpassx_a_better_stateless_password_generator/drxp1dd/\r\n[3] https://ae7.st/g/test.html\r\nhttps://apps.cygnius.net/passtest/\r\nhttps://blogs.dropbox.com/tech/2012/04/zxcvbn-realistic-password-strength-estimation/\r\nhttps://github.com/dropbox/zxcvbn\r\n\r\nBTW: author of a mentioned solution answered to your previous concerns https://www.reddit.com/r/programming/comments/7myfjg/masterpassx_a_better_stateless_password_generator/drya603/\r\n"},"comment":{"url":"https://api.github.com/repos/palant/pfp/issues/comments/363891424","html_url":"https://github.com/palant/pfp/issues/62#issuecomment-363891424","issue_url":"https://api.github.com/repos/palant/pfp/issues/62","id":363891424,"user":{"login":"palant","id":374261,"avatar_url":"https://avatars3.githubusercontent.com/u/374261?v=4","gravatar_id":"","url":"https://api.github.com/users/palant","html_url":"https://github.com/palant","followers_url":"https://api.github.com/users/palant/followers","following_url":"https://api.github.com/users/palant/following{/other_user}","gists_url":"https://api.github.com/users/palant/gists{/gist_id}","starred_url":"https://api.github.com/users/palant/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/palant/subscriptions","organizations_url":"https://api.github.com/users/palant/orgs","repos_url":"https://api.github.com/users/palant/repos","events_url":"https://api.github.com/users/palant/events{/privacy}","received_events_url":"https://api.github.com/users/palant/received_events","type":"User","site_admin":false},"created_at":"2018-02-07T19:57:40Z","updated_at":"2018-02-07T19:57:40Z","author_association":"OWNER","body":"For reference, there is now an article under https://pfp.works/documentation/choosing-master-password/ on the topic, linked when you set a master password."}}
{"actor":{"display_login":"palant"}}