Scrubbles

I don’t, specifically because I don’t trust myself to host that. I know what people will say here, but I trust 1pass way more than I could do it myself.

1pass uses your password plus a secret key to generate your full “password”, meaning you need both to access your vault. The password you memorize, the key you keep safe somewhere (inside the vault is even good, since you probably have it open on another device should you need it). They publish their docs, and show how they encrypt your vaults. To them, your vaults are truly just random bytes they store in blob storage. They don’t store your key, they don’t store your password, they will not help you out if you lock yourself out. That’s the level of security I want for a password vault. If they ever get breached, which hey, it can happen, the most someone will get is a random blob of data, which then I’d go and probably generate a new password and reencrypt everything again anyway.

Vs me hosting myself, I’m sure the code is good - but I don’t trust myself to host that data. There’s too many points of failure. I could set up encryption wrong, I could expose a bad port, if someone gained access to my network I don’t trust that they wouldn’t find some way to access my vaults. It’s just too likely I have a bad config somewhere that would open everything up. Plus then it’s on me to upgrade immediately if there’s a zero day, something I’m more likely to miss.

I know, on the selfhosted community this is heresy, but this is the one thing I don’t self host, I leave it to true security researchers.

I agree that’s there plan, but aren’t groups already a part of the activity pub spec?

They really think billionaires are like them, the only difference is that someone else goes to Walmart for them

Yeah I haven’t seen any mods who are for it, granted OP is on discuss.online and I have defederated a lot of hate instances. People on beehaw, lemmy.world, and quite a few others have been if anything overly accepting than not. However, it’s why I discourage browsing all and instead curating a list of communities.