I received this by email shortly after installing Mitro:
"Congratulations on adding your first secret to Mitro"
This makes me a little uncomfortable. How do they know? Why should they know?
Edit: I could not find those words in the github repo.
"Congratulations on adding your first secret to Mitro"
This makes me a little uncomfortable. How do they know? Why should they know?
Edit: I could not find those words in the github repo.
Mitro is distinctive amongst free/open source password managers
in that it's architected around cloud storage. For security,
the online password databases are encrypted with client-side
keys derived from your master password. For availability, they
are mirrored across three cloud storage providers. With this
design ... passwords can be synchronized across all of your
computers and devices with minimal effort.So presumably they sent the email only after I sent them the first "blob of gibberish" telling them I added _at least_ one entry to my password database.
Presumably they don't know if and when or how may entries I have. In this case they only noticed the first time I sent in my encrypted database.