Skip to content

Commit

Permalink
More spacing and markup
Browse files Browse the repository at this point in the history
  • Loading branch information
annejan committed May 5, 2015
1 parent 735de8a commit 44bf538
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
QtPass
======

QtPass is a gui for [pass](http://www.passwordstore.org/)
QtPass is a GUI for [pass](http://www.passwordstore.org/)

Features
--------
Expand All @@ -16,6 +16,7 @@ Security considerations
-----------------------
Using this program will not magically keep your passwords secure against
compromised computers even if you use it in combination with a smartcard.

It does protect future and changed passwords though against anyone with access to
your password store only but not your keys.
Used with a smartcard it also protects against anyone just monitoring/copying
Expand All @@ -25,6 +26,7 @@ Once you plug in your smartcard and enter your PIN (or due to CVE-2015-3298
even without your PIN) all your passwords available to the machine can be
decrypted by it, if there is malicious software targeted specifically against
it installed (or at least one that knows how to use a smartcard).

To get better protection out of use with a smartcard even against a targeted
attack I can think of at least two options:
* The smartcard must require explicit confirmation for each decryption operation.
Expand Down

0 comments on commit 44bf538

Please sign in to comment.