Update README.md

This commit is contained in:
unamundan 2019-03-24 18:23:32 -05:00 committed by GitHub
parent 60a7cf4e24
commit fbf66fae01
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -10,7 +10,6 @@ Passman is a full featured password manager.
## Join us! ## Join us!
Visit the [“Passman General Talk” Telegram Group](https://t.me/passman_general) to participate in all sorts of topical discussions about Passman and its apps! Visit the [“Passman General Talk” Telegram Group](https://t.me/passman_general) to participate in all sorts of topical discussions about Passman and its apps!
## Contents ## Contents
* [Screenshots](https://github.com/nextcloud/passman#Screenshots) * [Screenshots](https://github.com/nextcloud/passman#Screenshots)
* [Features](https://github.com/nextcloud/passman#features) * [Features](https://github.com/nextcloud/passman#features)
@ -25,9 +24,6 @@ Visit the [“Passman General Talk” Telegram Group](https://t.me/passman_gener
* [Maintainers](https://github.com/nextcloud/passman#main-developers) * [Maintainers](https://github.com/nextcloud/passman#main-developers)
* [Contributors](https://github.com/nextcloud/passman#contributors) * [Contributors](https://github.com/nextcloud/passman#contributors)
## Screenshots ## Screenshots
![Logged in to vault](http://i.imgur.com/ciShQZg.png) ![Logged in to vault](http://i.imgur.com/ciShQZg.png)
@ -39,7 +35,6 @@ Visit the [“Passman General Talk” Telegram Group](https://t.me/passman_gener
For more screenshots: [Click here](http://imgur.com/a/giKVt) For more screenshots: [Click here](http://imgur.com/a/giKVt)
## Features: ## Features:
* Multiple vaults * Multiple vaults
* Vault keys are never sent to the server * Vault keys are never sent to the server
@ -57,7 +52,6 @@ For more screenshots: [Click here](http://imgur.com/a/giKVt)
- EnPass - EnPass
- [ocPasswords](https://github.com/fcturner/passwords) - [ocPasswords](https://github.com/fcturner/passwords)
Try a Passman demo [here](https://demo.passman.cc). Try a Passman demo [here](https://demo.passman.cc).
## Tested on ## Tested on
@ -65,12 +59,10 @@ Try a Passman demo [here](https://demo.passman.cc).
For older Versions see the [Releases Tab](https://github.com/nextcloud/passman/releases) For older Versions see the [Releases Tab](https://github.com/nextcloud/passman/releases)
## External apps ## External apps
* [Firefox / chrome extension](https://github.com/nextcloud/passman-webextension) * [Firefox / chrome extension](https://github.com/nextcloud/passman-webextension)
* [Android app](https://github.com/nextcloud/passman-android) * [Android app](https://github.com/nextcloud/passman-android)
## Database Compatibility ## Database Compatibility
| | Supported | Tested | Untested | | | Supported | Tested | Untested |
@ -80,7 +72,6 @@ For older Versions see the [Releases Tab](https://github.com/nextcloud/passman/r
| travis | | • | | | travis | | • | |
| pgsql | | | • | | pgsql | | | • |
## Security ## Security
### Password generation ### Password generation
@ -91,7 +82,6 @@ Generate passwords as you like
![](http://i.imgur.com/jcRicOV.png) ![](http://i.imgur.com/jcRicOV.png)
Passwords are generated using `sjcl` randomization. Passwords are generated using `sjcl` randomization.
### Storing credentials ### Storing credentials
All passwords are encrypted client side with [sjcl](https://github.com/bitwiseshiftleft/sjcl) using 256-bit AES. All passwords are encrypted client side with [sjcl](https://github.com/bitwiseshiftleft/sjcl) using 256-bit AES.
You supply a vault key which sjcl uses to encrypt your credentials. Your encrypted credentials are then sent to the server and encrypted yet again using the following routine: You supply a vault key which sjcl uses to encrypt your credentials. Your encrypted credentials are then sent to the server and encrypted yet again using the following routine:
@ -102,7 +92,6 @@ You supply a vault key which sjcl uses to encrypt your credentials. Your encrypt
* [Initialization vector](http://en.wikipedia.org/wiki/Initialization_vector) (IV) is hidden. * [Initialization vector](http://en.wikipedia.org/wiki/Initialization_vector) (IV) is hidden.
* [Double Hash-based Message Authentication Code](http://en.wikipedia.org/wiki/Hash-based_message_authentication_code) (HMAC) is applied for source data verification. * [Double Hash-based Message Authentication Code](http://en.wikipedia.org/wiki/Hash-based_message_authentication_code) (HMAC) is applied for source data verification.
### Sharing credentials ### Sharing credentials
Passman allows users to share passwords. *(Administrators may disable this feature.)* Passman allows users to share passwords. *(Administrators may disable this feature.)*
@ -140,8 +129,6 @@ docker run -p 8080:80 -p 8443:443 -v /directory/cert.pem:/data/ssl/cert.pem -v /
If you want a production-ready container, use the [Nextcloud Docker](https://hub.docker.com/_/nextcloud/) and install Passman as an app. If you want a production-ready container, use the [Nextcloud Docker](https://hub.docker.com/_/nextcloud/) and install Passman as an app.
## Development ## Development
* Passman uses a single `.js` file for templates which minimizes XHR template requests. * Passman uses a single `.js` file for templates which minimizes XHR template requests.
* CSS uses SASS, so Ruby and SASS must be installed. * CSS uses SASS, so Ruby and SASS must be installed.
@ -157,7 +144,6 @@ If you want a production-ready container, use the [Nextcloud Docker](https://hub
Add yours when creating a [pull request](https://help.github.com/articles/creating-a-pull-request/)! Add yours when creating a [pull request](https://help.github.com/articles/creating-a-pull-request/)!
* Newhinton * Newhinton
## FAQ ## FAQ
**Are you adding something to check if malicious code is executing on the browser?** **Are you adding something to check if malicious code is executing on the browser?**
No, because malicious code can edit functions that check for malicious code. No, because malicious code can edit functions that check for malicious code.