Does Firefox master password add anything to a full encrypted disk ? As I understand it, Firefox master password is here to protect again passive attacks, ie when firefox is not running, or at least when the passwords are not unlocked yet. But when running, password are stored in cleartext in memory... So if my disk is fully encrypted, is there any gain in encrypting a file (firefox saved passwords) on it ?
Answer
The value of FF's keyvault remains because it prevents malware and other processes running on your system from obtaining access to the vault. FDE is great when the system is off, but doesn't protect anything from software running on the pc locally.
No comments:
Post a Comment