Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

Searching for answers about ways to record Firefox passwords in Gnome Seahorse KeyringInstall me-tv vault,
I found severals possibilities:

  1. Firefox Gnome Keyring firefox addon
    from https://github.com/ in this answer and this answer

  2. Gnome keyring password integration firefox addon
    from https://addons.mozilla.org/en-US in this question

  3. Integration con Gnome Keyring firefox addon
    from https://addons.mozilla.org/fr
    seems to be the Spanish version of the previous bullet on the French server (humm weird)

  4. add this PPA in https://launchpad.net and install package called "mozilla-gnome-keyring"
    from this bugzilla

But now how can I know which solution is safe ?

share|improve this question

2 Answers 2

up vote 1 down vote accepted

Here is my analyze to the 4 possibible ways to record Firefox passwords listed in your question,
plus a new solution (#5):

  1. Their are some notes to security in the README. It seems that it is not more or less secure then the original implementation. But for GNOME Keyring you have some options like auto-lock your keyring after a certain (idle) time.

  2. Source can be found on the Add-On-site under "Version Info" -> "View the Source" and yes, it is from a spanish coder as you can see by following the link to the authors website. A drawback for this extension is the missing license which makes it no FOSS.

  3. is the same as 2., Mozilla just localize their websites

  4. Is just a packaged version of 1.

  5. A new competitor seems to be this "GNOME Keyring Integration"-Add-On. It's licensed under the GPLv3 and is very lightweight. Source can also be found on the Add-On-site under "Version Info" -> "View the Source". So you can also take a full review.

share|improve this answer

After posting this question on an other Stack Exchange site,focused on IT security
I got this answer:

  • add-on #1 is open source, so someone with a good knowledge could check if it is safe.
  • add-on #2 and #3 are secret codes, so riskier
  • solution #4, about PPA, is safe only if you trust the author

To sum-up,
with my level of knowledge and competence, there is no safe solution.
So I'll just wait till Ubuntu and Firefox produce an integrated solution without add-on needed...**

share|improve this answer
    
A solution "being safe" doesn't really revolve around how much you know. It is always a question about whom you trust. I.e. even if you would be able to program your own keysafe you would still have to trust the compiler (and those who package and programmed it) and the CPU builder. –  MadMike Oct 21 '13 at 14:06

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.