Perry Mitchell

I think what @ldexterldesign suggests is a simpler, more natural approach. Tags don't fit as well as just using custom fields. What say you @sallar?

Agreed, though I would prefer to stay very vague when decryption errors occur. For example if something went wrong in the decryption, I would throw the same error if the...

Agreed - this is a sensible approach :)

Might be best throwing a custom error here, so that (err instanceof Error) is still correct. I don't much like throwing strings, objects etc. over using actual Errors. The code...

Hi! Thanks for the interest. It is actually, currently, **under development**. I'm trying to set aside more time for it, which is why there's been far less going on in...

Let's use this: https://www.npmjs.com/package/onedrive-api I'd like an entire client built around it, that includes the OAuth side of things as well. Far easier to implement that way. Might be some...

Hi. Unfortunately there's no recovery system right now. Just the password that you used to encrypt the vault. That cannot be retrieved or bypassed. Sorry.

Hi @n8v8R - Do you have any source for such claims? I don't believe CBC to be vulnerable to any specific attacks - It's extremely widely used **and** at specifications...

While I agree there are issues with CBC, it still reads that they're mostly implementation-based issues. For instance, a quote from one of your articles: > There are still valid...

> The point I was trying bring across is that CBC has known vulnerabilities which GCM is not yet plagued with. And numerous security advisories suggests to prefer GCM over...