In-App browsers considered unsafe - 1Password included?

nev

I read this:

http://furbo.org/2014/09/24/in-app-browsers-considered-harmful/

.. and I wondered if the 1Password in-app browser could, even in principle, steal data.

?

Ben

@nev‌

I suppose, in principle, it could. But what would AgileBits gain by doing so? Millions of users trust our applications with their most sensitive data -- credit cards, social security numbers, passport data, etc. If we were to start stealing data, we would lose that trust.

nev

What would you gain? Well, only a cynic would say that one of your employees could gain a great deal. But yes, I guess "murder would out" - eventually - and you'd lose every smidgen of that trust.

hawkmoth

@jpgoldberg addressed a similar question a little while ago. I found it interesting, so I thought I'd add a link to it in this thread too. You can read it here.

Ben

And also here:

• http://blog.agilebits.com/2013/09/06/1password-and-the-crypto-wars/