SaaS options - secure password (and stuff) sharing
SaaS options - secure password (and stuff) sharing
Author
Discussion

RemarkLima

Original Poster:

2,849 posts

242 months

Friday 12th March 2021
quotequote all
Hi all,

I know there's a few techies on here so just would like to canvas some opinions.

In my professional life, I've always hit that point where I have to send something securely to someone else, a password, VPN config, pre shared key blah blah, and always end up messing around with Sharepoint, SMS, WhatsApp etc... Which is a total PITA for a few lines of text!

So, I've taken some spare time to put together: https://www.burnafterreading.me

I'm pretty solid on the encryption and security, as it's a big part of the day job, but getting it all pen tested and code reviewed - however, I'd be keen to know if it's something that would be "useful".

I've built it as a freemium thing (gotta fund a new Lotus, or an old one, and a double garage - maybe a triple one even!).

Ready to be tarred and feathered bandit

ETA - the title is supposed to say "opinions", not "options", but can't edit.

Edited by RemarkLima on Friday 12th March 20:49

tangerine_sedge

6,699 posts

248 months

Saturday 13th March 2021
quotequote all
This idea already exists : https://onetimesecret.com/

Good luck, but you're late to market wink

RemarkLima

Original Poster:

2,849 posts

242 months

Saturday 13th March 2021
quotequote all
Yes, I've used that before but has some limitations - plain text only, no logs of what I've created and more so only provides the link, no option to send the key via a separate channel.

Hence making a different version. But I guess I'm canvassing that would you use something like this at all? Or just use onetimesecret?

tangerine_sedge

6,699 posts

248 months

Saturday 13th March 2021
quotequote all
I've only ever used it to share a first time password with people, so it only needs to be secure for the 2 minutes or so until the user logs in and does the first login password reset. There's a little risk but acceptable.

There's possibly a market for a properly peer reviewed and proven secure version which is hosted in the UK, but I don't think people will pay for it.

RemarkLima

Original Poster:

2,849 posts

242 months

Monday 15th March 2021
quotequote all
OK, interesting thanks.

UK hosted - check.
Free - check.

Peer reviewed, I could open source but currently getting a pen test and code review - would that work?

The frustrating thing with Pen Tests / Reviews etc is that they'll not accredit anything, as that "point in time" with "what they know" it's OK... So slightly annoying in that sense.