What's the difference between KeePassXC and KeePass? They both seem to be recently updated.
Currently using BitWarden and I like the sync, the browser integration, and availability on Android.
Currently using BitWarden and I like the sync, the browser integration, and availability on Android.
KeePass has many plugins available, which allow extending its behavior. KeePassXC doesn't have plugins, but has many quality of live things built-in.
I used both, but currently use KeePassXC. I really love its ssh key integration.
KeepassXC written with C++ and crossplatform GUI, so it’s better fit with Linux and macOS. Also, AFAIK, KeepassXC has more features.
I’m using Keepass because I trust C# more than I trust C++ when it comes to security. But it’s nice to have options.
https://keepassxc.org/docs/#faq-keepassx
tldr is : C# (canonical project) -- vs -- C++ (older project) -- vs -- C++ (newer project)
Looks like it uses HTTPS to me.
What you're referring to is an old (fixed roughly six years ago), and highly misrepresented situation discussed here:
Here it is 3.5 years ago being hosted over http and not redirecting to https. It looks like they changed in 2018.
https://web.archive.org/web/20170907194943/http://keepass.in...
New version of the software were served via mirrors and digital signatures for all versions were made available. Standard security practice for the era was to verify the digital signatures of software before installing it because so much software was served by third parties.
Also, this all happened before HTTPS was ubiquitous (the patch to force version checks to use HTTPS came in 2016). Most sites still served traffic over regular HTTP, with only logins and purchase pages using encryption.