XSafe password management extension: Background extension receiving messages from web app (XSafe) for encrypt and decrypt pgp…
XSafe password management extension: Background extension receiving messages from web app (XSafe) for encrypt and decrypt pgp messages.
This extension is mandatory for using XSafe app which is a web app used for passwords management and share between authorized users.
All passwords are stored in database as pgp messages (encrypted).
1) For encryption user must get server's public key and use it to generate a pgp message.
2) For encryption and signing user must use server's public key, his private key and his passphrase (got from server at signup)
3) For decryption user must use server's public key to verify signature, his private key + passphrase to decrypt pgp message generated by the server specially for him.
This extension runs in background allowing to accomplish these 3 tasks for user without communicating his passphrase and private key on the network (even local network)
This extension makes a single external call with the backend server of the system in order to get public key from server.
Decrypted messages are not stored in any storage device by the extension.
This extension will never store encrypted or clear text passwords got from both backend server and user.