clipperz

This is a post about freedom. The freedom to keep your data for yourself and the freedom to run free software. You should be able to reclaim and enjoy these freedoms also when using web applications.

We are happy to announce Clipperz Community Edition! Now you can host Clipperz password manager on your own server. Clipperz Community Edition offers same features and functionalities of the online service hosted at http://www.clipperz.com with an added warm feeling of having your precious passwords and confidential data on your own server.

You no longer have an excuse for keeping your passwords and sensitive data on that password-protected Excel file. It’s not convenient and it’s not safe!

Clipperz password manager is now available in French. Emmanuel Pays and Antonin Enfrun have done a great job in translating the Clipperz interface to French, a language spoken by more than 100 million people around the world.

(picture from Blagman.net)

[

When we launched our online password manager, we dubbed it the first example of a zero-knowledge web application. We simply meant that Clipperz knows nothing about its users and their data. It was a simplistic and inaccurate definition: the zero-knowledge paradigm needs to be better defined. Our fault.

In the previous post I wrote about our zeal in building zero-knowledge web applications and our pledge to never introduce features that could compromise the integrity of our model.
Now I present a comparative analysis of Clipperz and PassPack with regard to the implementation of one-click logins. The analysis will clearly show the benefits of adopting a rigorous zero-knowledge methodology.

A true zero-knowledge web application knows nothing about its users and their data. We have been fascinated by this simple idea since 2005 when we started this blog. Since then it became our obsession.

Authentication is an essential part of any web application. But why are web service providers so secretive about their authentication protocols and procedures? Why they are not disclosing any information about how users’ credentials are communicated, verified and stored?

Clipperz Compact is a stripped down version of Clipperz online password manager designed to be opened in the Firefox sidebar. Its purpose is to keep your collection of “direct logins” always at hand. [UPDATE - Clipperz Compact works smoothly also in Opera’s panel.]

Clipperz online password manager is a cryptographic system designed and built to achieve a 128-bit security level. This could be an obscure statement and I will try to clarify it.