Yes, we're looking at it, but don't have a detailed plan or schedule to share yet.
Justin On Wed, Oct 3, 2018 at 10:40 AM Jörg Knobloch <jo...@jorgk.com> wrote: > Hi all, > > an unrelated discussion made me aware that the master password cipher > strength bug[1] is still open. Any plans to tackle that? > > Other software uses strong AES algorithms for their "password > collections". Would it be hard to follow? > > Jörg. > > [1] https://bugzilla.mozilla.org/show_bug.cgi?id=524403 > > Plenty of bad press here: > > https://nakedsecurity.sophos.com/2018/03/20/nine-years-on-firefoxs-master-password-is-still-insecure/ > > https://fossbytes.com/firefox-master-password-weak-encryption-brute-force-one-minute/ > > > _______________________________________________ > dev-platform mailing list > dev-platform@lists.mozilla.org > https://lists.mozilla.org/listinfo/dev-platform > _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
