<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Auto-login: Under the Hood</title>
	<atom:link href="http://blog.passpack.com/2007/03/how-passpack-auto-login-works-qa/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.passpack.com/2007/03/how-passpack-auto-login-works-qa/</link>
	<description>Passpack keeps your logins safe, organized and available 24/7. You can share passwords with your team in 100% privacy.</description>
	<lastBuildDate>Fri, 10 May 2013 18:12:33 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.4</generator>
	<item>
		<title>By: Tara</title>
		<link>http://blog.passpack.com/2007/03/how-passpack-auto-login-works-qa/comment-page-1/#comment-157</link>
		<dc:creator>Tara</dc:creator>
		<pubDate>Thu, 09 Aug 2007 16:37:38 +0000</pubDate>
		<guid isPermaLink="false">http://blog.passpack.com/2007/03/23/how-passpack-auto-login-works-qa/#comment-157</guid>
		<description>@Michael

If you create a different entry in your Passpack account for each typepad login, then you should have no problems using the auto-login.

Did that answer your question?

On IE6: Thanks for the heads up.</description>
		<content:encoded><![CDATA[<p>@Michael</p>
<p>If you create a different entry in your Passpack account for each typepad login, then you should have no problems using the auto-login.</p>
<p>Did that answer your question?</p>
<p>On IE6: Thanks for the heads up.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: michael</title>
		<link>http://blog.passpack.com/2007/03/how-passpack-auto-login-works-qa/comment-page-1/#comment-156</link>
		<dc:creator>michael</dc:creator>
		<pubDate>Sat, 04 Aug 2007 21:17:46 +0000</pubDate>
		<guid isPermaLink="false">http://blog.passpack.com/2007/03/23/how-passpack-auto-login-works-qa/#comment-156</guid>
		<description>i&#039;m not seeing the following addressed and have had problems before:  Typepad - multiple accounts, same login address, requires different username and different pw for each account / i do not use the save cookies option so it always asks for the login info / but:  does passpack handle multiple auto logins for same login addin address for same passpack user account? [i now have 3 different manual account logins for the typad login address, and they work fine / my fear is that passpack might assume that one login address has only one login for the passpack user /which would then autolog into a fixed typepad account of mine, and thus auto login  for typepad would not work //

NOTE:  blog does not print properly on ie6; wish it would</description>
		<content:encoded><![CDATA[<p>i&#8217;m not seeing the following addressed and have had problems before:  Typepad &#8211; multiple accounts, same login address, requires different username and different pw for each account / i do not use the save cookies option so it always asks for the login info / but:  does passpack handle multiple auto logins for same login addin address for same passpack user account? [i now have 3 different manual account logins for the typad login address, and they work fine / my fear is that passpack might assume that one login address has only one login for the passpack user /which would then autolog into a fixed typepad account of mine, and thus auto login  for typepad would not work //</p>
<p>NOTE:  blog does not print properly on ie6; wish it would</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tara</title>
		<link>http://blog.passpack.com/2007/03/how-passpack-auto-login-works-qa/comment-page-1/#comment-155</link>
		<dc:creator>Tara</dc:creator>
		<pubDate>Fri, 08 Jun 2007 22:53:22 +0000</pubDate>
		<guid isPermaLink="false">http://blog.passpack.com/2007/03/23/how-passpack-auto-login-works-qa/#comment-155</guid>
		<description>It&#039;s taken a lot (make that TONS) of discussion and tweaking to get to this point. It really is about being able to offer a solution that will log you into as many types of websites as possible. It&#039;s amazing at just how different two login forms can be. This tool covers a vast majority of them.

So, yes, you could say we have mixed feelings about it too. That&#039;s why we&#039;re going to inform users and let each person choose for himself. Of course, should we ever have any doubt as to whether or not it&#039;s safe, we&#039;d pull it - without blinking.

APIs: yes, on the radar. We&#039;ve got quite a tight release schedule planned, and the API is actually quite a ways along. There are many big twists and turns that need to be made before we get there. But we&#039;ll get there.

Keep those suggestions coming. It&#039;s refreshing. :)</description>
		<content:encoded><![CDATA[<p>It&#8217;s taken a lot (make that TONS) of discussion and tweaking to get to this point. It really is about being able to offer a solution that will log you into as many types of websites as possible. It&#8217;s amazing at just how different two login forms can be. This tool covers a vast majority of them.</p>
<p>So, yes, you could say we have mixed feelings about it too. That&#8217;s why we&#8217;re going to inform users and let each person choose for himself. Of course, should we ever have any doubt as to whether or not it&#8217;s safe, we&#8217;d pull it &#8211; without blinking.</p>
<p>APIs: yes, on the radar. We&#8217;ve got quite a tight release schedule planned, and the API is actually quite a ways along. There are many big twists and turns that need to be made before we get there. But we&#8217;ll get there.</p>
<p>Keep those suggestions coming. It&#8217;s refreshing. :)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ryan</title>
		<link>http://blog.passpack.com/2007/03/how-passpack-auto-login-works-qa/comment-page-1/#comment-154</link>
		<dc:creator>Ryan</dc:creator>
		<pubDate>Fri, 08 Jun 2007 21:51:25 +0000</pubDate>
		<guid isPermaLink="false">http://blog.passpack.com/2007/03/23/how-passpack-auto-login-works-qa/#comment-154</guid>
		<description>Thanks for the response.  I have mixed feelings about this issue.  I&#039;m currently trying out both Passpack and Clickerz, and I see how you would like to improve on the way that Clickerz handles this - there is clearly room for improvement, and maybe a browser extension is the way to go.

Ideally, I would like to be able to store information for 5-10 years without worrying about its security; 10 years is a long time online and companies change as they grow.  It&#039;s not so much that I don&#039;t trust Passpack - I don&#039;t trust the system.  It seems like the greater threat isn&#039;t that Passpack would make copies of my data but that having this sytem architecture reduces the barriers to hackers obtaining my data.

I guess my suggestion would be to step back from the web interface a bit.  The service you provide would be useful in many more contexts than a web page.  I would LOVE to see a well-documented public API and SDK&#039;s in a few languages (C, Python, maybe Java).  This would allow Passpack to be integrated directly into other software.  I could see Passpack being developed into an OSX Keychain plugin or being used to provide access to encrypted partitions on thumbdrives or storing SSH keypairs.  I use three computers on a daily basis - maintaining consistent security policies between the 3 is a PITA - I would love to be able to connect all three to Passpack and be done with it.

Which is to say i think a browser plugin would be an ideal solution ;)</description>
		<content:encoded><![CDATA[<p>Thanks for the response.  I have mixed feelings about this issue.  I&#8217;m currently trying out both Passpack and Clickerz, and I see how you would like to improve on the way that Clickerz handles this &#8211; there is clearly room for improvement, and maybe a browser extension is the way to go.</p>
<p>Ideally, I would like to be able to store information for 5-10 years without worrying about its security; 10 years is a long time online and companies change as they grow.  It&#8217;s not so much that I don&#8217;t trust Passpack &#8211; I don&#8217;t trust the system.  It seems like the greater threat isn&#8217;t that Passpack would make copies of my data but that having this sytem architecture reduces the barriers to hackers obtaining my data.</p>
<p>I guess my suggestion would be to step back from the web interface a bit.  The service you provide would be useful in many more contexts than a web page.  I would LOVE to see a well-documented public API and SDK&#8217;s in a few languages (C, Python, maybe Java).  This would allow Passpack to be integrated directly into other software.  I could see Passpack being developed into an OSX Keychain plugin or being used to provide access to encrypted partitions on thumbdrives or storing SSH keypairs.  I use three computers on a daily basis &#8211; maintaining consistent security policies between the 3 is a PITA &#8211; I would love to be able to connect all three to Passpack and be done with it.</p>
<p>Which is to say i think a browser plugin would be an ideal solution ;)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tara</title>
		<link>http://blog.passpack.com/2007/03/how-passpack-auto-login-works-qa/comment-page-1/#comment-153</link>
		<dc:creator>Tara</dc:creator>
		<pubDate>Fri, 08 Jun 2007 20:17:46 +0000</pubDate>
		<guid isPermaLink="false">http://blog.passpack.com/2007/03/23/how-passpack-auto-login-works-qa/#comment-153</guid>
		<description>UPDATE - AUG. 14, 2007

The publically released version of Passpack&#039;s Auto-login fully complies with Host-Proof Hosting, and is no exception to Passpack&#039;s general security. &lt;a href=&quot;#datatransport&quot; rel=&quot;nofollow&quot;&gt;Here&#039;s how it works&lt;/a&gt;.

The information previously contained in this comment is no longer valid and has been removed as it was causing some confusion.</description>
		<content:encoded><![CDATA[<p>UPDATE &#8211; AUG. 14, 2007</p>
<p>The publically released version of Passpack&#8217;s Auto-login fully complies with Host-Proof Hosting, and is no exception to Passpack&#8217;s general security. <a href="#datatransport" rel="nofollow">Here&#8217;s how it works</a>.</p>
<p>The information previously contained in this comment is no longer valid and has been removed as it was causing some confusion.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ryan</title>
		<link>http://blog.passpack.com/2007/03/how-passpack-auto-login-works-qa/comment-page-1/#comment-152</link>
		<dc:creator>Ryan</dc:creator>
		<pubDate>Fri, 08 Jun 2007 19:26:21 +0000</pubDate>
		<guid isPermaLink="false">http://blog.passpack.com/2007/03/23/how-passpack-auto-login-works-qa/#comment-152</guid>
		<description>UPDATE - AUG. 14, 2007

The publically released version of Passpack&#039;s Auto-login fully complies with Host-Proof Hosting, and is no exception to Passpack&#039;s general security. &lt;a href=&quot;datatransport&quot; rel=&quot;nofollow&quot;&gt;Here&#039;s how it works&lt;/a&gt;.

The information previously contained in this comment is no longer valid and has been removed as it was causing some confusion.</description>
		<content:encoded><![CDATA[<p>UPDATE &#8211; AUG. 14, 2007</p>
<p>The publically released version of Passpack&#8217;s Auto-login fully complies with Host-Proof Hosting, and is no exception to Passpack&#8217;s general security. <a href="datatransport" rel="nofollow">Here&#8217;s how it works</a>.</p>
<p>The information previously contained in this comment is no longer valid and has been removed as it was causing some confusion.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tara</title>
		<link>http://blog.passpack.com/2007/03/how-passpack-auto-login-works-qa/comment-page-1/#comment-151</link>
		<dc:creator>Tara</dc:creator>
		<pubDate>Tue, 10 Apr 2007 10:13:32 +0000</pubDate>
		<guid isPermaLink="false">http://blog.passpack.com/2007/03/23/how-passpack-auto-login-works-qa/#comment-151</guid>
		<description>@Hans
I just wanted to let you know that we&#039;ve published the comparison with Clipperz here:
http://blog.passpack.com/2007/04/10/passpack-and-clipperz-the-difference/

On the Smart Button, based on the first round of user testing, we&#039;re making many changes. The basic functionality remains the same, but I&#039;d like to refrain from further explanations until development has settled down a bit. I *will* however answer your questions once that happens.

Cheers,
Tara</description>
		<content:encoded><![CDATA[<p>@Hans<br />
I just wanted to let you know that we&#8217;ve published the comparison with Clipperz here:<br />
<a href="http://blog.passpack.com/2007/04/10/passpack-and-clipperz-the-difference/" rel="nofollow">http://blog.passpack.com/2007/04/10/passpack-and-clipperz-the-difference/</a></p>
<p>On the Smart Button, based on the first round of user testing, we&#8217;re making many changes. The basic functionality remains the same, but I&#8217;d like to refrain from further explanations until development has settled down a bit. I *will* however answer your questions once that happens.</p>
<p>Cheers,<br />
Tara</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tara</title>
		<link>http://blog.passpack.com/2007/03/how-passpack-auto-login-works-qa/comment-page-1/#comment-150</link>
		<dc:creator>Tara</dc:creator>
		<pubDate>Tue, 03 Apr 2007 00:57:46 +0000</pubDate>
		<guid isPermaLink="false">http://blog.passpack.com/2007/03/23/how-passpack-auto-login-works-qa/#comment-150</guid>
		<description>Hello Hans,
You&#039;ve asked many good questions. I will work on some detailed replies for you and I&#039;ll post links here.

A quick note on clipperz, they&#039;ve been around for a while. They&#039;ve recently launched a new version so they are doing some publicity on our coat-tails. I&#039;ll prepare a full comparison for you though. There are quite a many similarities, and just as many differences.

Thanks and let me know if you have any other questions in the meantime.
Tara</description>
		<content:encoded><![CDATA[<p>Hello Hans,<br />
You&#8217;ve asked many good questions. I will work on some detailed replies for you and I&#8217;ll post links here.</p>
<p>A quick note on clipperz, they&#8217;ve been around for a while. They&#8217;ve recently launched a new version so they are doing some publicity on our coat-tails. I&#8217;ll prepare a full comparison for you though. There are quite a many similarities, and just as many differences.</p>
<p>Thanks and let me know if you have any other questions in the meantime.<br />
Tara</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Hans Nordhaug</title>
		<link>http://blog.passpack.com/2007/03/how-passpack-auto-login-works-qa/comment-page-1/#comment-147</link>
		<dc:creator>Hans Nordhaug</dc:creator>
		<pubDate>Fri, 30 Mar 2007 13:45:59 +0000</pubDate>
		<guid isPermaLink="false">http://blog.passpack.com/2007/03/23/how-passpack-auto-login-works-qa/#comment-147</guid>
		<description>Yes, this looks complicated and (always) requires two clicks - &quot;Go there&quot; and the &quot;Smart Button&quot;. I don&#039;t feel that this post justifies completely the two clicks. You mention that the page is opened &quot;[...] through the Passpack server which does a little obfuscation so that the receiving website doesn’t know you clicked through from Passpack [...]&quot;. What more does the two clicks add than removing the referer header (which can be done by browser plugins or proxies)?

I also just noticed that you have gotten a new competitor - http://www.clipperz.com/ - which offers &quot;Direct Login&quot; which is simpler (it&#039;s seems) and requires just one click. What is better/more secure with the &quot;Smart Button&quot;? And maybe you could say something about why Passpack is better than Clipperz - if you are? The technical solutions look very similar ...

Happy Easter from Norway!</description>
		<content:encoded><![CDATA[<p>Yes, this looks complicated and (always) requires two clicks &#8211; &#8220;Go there&#8221; and the &#8220;Smart Button&#8221;. I don&#8217;t feel that this post justifies completely the two clicks. You mention that the page is opened &#8220;[...] through the Passpack server which does a little obfuscation so that the receiving website doesn’t know you clicked through from Passpack [...]&#8220;. What more does the two clicks add than removing the referer header (which can be done by browser plugins or proxies)?</p>
<p>I also just noticed that you have gotten a new competitor &#8211; <a href="http://www.clipperz.com/" rel="nofollow">http://www.clipperz.com/</a> &#8211; which offers &#8220;Direct Login&#8221; which is simpler (it&#8217;s seems) and requires just one click. What is better/more secure with the &#8220;Smart Button&#8221;? And maybe you could say something about why Passpack is better than Clipperz &#8211; if you are? The technical solutions look very similar &#8230;</p>
<p>Happy Easter from Norway!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tara</title>
		<link>http://blog.passpack.com/2007/03/how-passpack-auto-login-works-qa/comment-page-1/#comment-148</link>
		<dc:creator>Tara</dc:creator>
		<pubDate>Fri, 23 Mar 2007 19:55:27 +0000</pubDate>
		<guid isPermaLink="false">http://blog.passpack.com/2007/03/23/how-passpack-auto-login-works-qa/#comment-148</guid>
		<description>@Delta Pi
Well, I suppose that&#039;s good that you thought it was simple - that means that it must be fairly simple to use. :)</description>
		<content:encoded><![CDATA[<p>@Delta Pi<br />
Well, I suppose that&#8217;s good that you thought it was simple &#8211; that means that it must be fairly simple to use. :)</p>
]]></content:encoded>
	</item>
</channel>
</rss>
