cache.agilebits.com?

suzerain

I just updated 1Password, and after the update, when clicked on, the 1Password browser extension keeps attempting to access cache.agilebits.com. I have been blocking this access because it's not clear why this extension needs to access a remote server every time it's clicked on. Is the browser extension tracking usage or sending personal data to a server?

hawkmoth

Do you have the option checked to use rich icons? Those get downloaded from the cloud. I don't know the address you refer to, but it's the only reason I know of that 1Password would be connect to the Internet without your instructions.

Stephen_C

There is a very good knowledge base article here "What do we know about you?" which should reassure you.

Stephen

littlebobbytables

Hi @suzerain

I'd say you've received a couple of very good answers so far. If you have any follow up questions do please ask. It is all to do with Rich Icons and turning off that feature would eliminate the requests.

suzerain

Thanks much for the answer. Once note that the linked knowledge base documents mention imageserver.agilebits.com but not cache.agilebits.com. If you changed the server name it might make sense to update the knowledge base as well.

Megan

Hi @suzerain ,

I'm glad to hear that the knowledgebase article was helpful! I've passed your thoughts along to our documentation team. :)

jpgoldberg

Thanks, @suzerain. I will update the Knowledge Base articles. We've been moving some of these things around.

Also thanks for paying attention to what 1Password talks to. Considering the nature of the secrets that it manages, it is very good to know what it might be sending where. For our privacy design to be independently verifiable, it is important that people check on these. So thank you for checking.

We've recently moved some of these services (software updates, Rich Icons) from CloudFront to CacheFly, so we are in a mixed state in which some versions of 1Password on some platforms will be used the Cloudfront domains, while others will be using CacheFly. I've updated our knowledge base to reflect this.

franckhoffmann

Hi,

I use 1Password for mac and I have Little Snitch installed (http://www.obdev.at/products/littlesnitch/index.html)
Little Snitch monitors my in/out connections.

When I launch 1password, 1 password wants to connect to: cache.agilebits.com

More info:
TCP connections to port 443 (https) of cache.agilebits.com
IP Address: 205.234.175.175
Reverse DNS name: vip1.g-anycast1.cachefly.net
Established by: /Applications/1Password 5.app/Contents/MacOS/1Password 5
Process ID 27906

I am unsure this problem is related to the current topic but this is the only post I found searching for 'cache.agilebits.com'

Please advise.

Best,
Franck Hoffmann

hawkmoth

@franckhoffmann - If you have rich icons enabled in 1Password, it downloads the icons from that server. In all likelihood, that is what you are observing.

littlebobbytables

Hi @franckhoffmann,

Due to how CDNs work Little Snitch can often report a different URL for a particular IP address when it does its reverse DNS query.

If you use and want to use Rich Icons then Allow outgoing TCP connections to port 443 (https) of cache.agilebits.com should be sufficient for Rich Icons. That rule isn't need if you turn Rich Icons off in 1Password's preferences.

You'll probably need another rule if you run our Agile Web Store (AWS) version (for update checking). I'm running the MAS version so my updates come from Apple's servers.

Does that help?