I don't think Chrome's password store is accessible to extensions.  I
recommend encrypting the passwords and storing the encrypted values in
localStorage.  Key management is a bit tricky.  You could either ask
the user to enter a passphrase and generate the key from that, or you
could store the key on your server and use another mechanism to
authenticate the user.

I've heard that <http://crypto.stanford.edu/sjcl/> is a high-quality
symmetric crypto library for JavaScript.

Adam


On Thu, Dec 10, 2009 at 5:11 PM, nibl <wordi...@googlemail.com> wrote:
> Is there a way to use Chrome's password storage? I need to send logins
> over https, but where and how to store?
>
> Mozilla has nslLoginManager.
>
> There are these two threads, but no really secure conclusions:
>
> http://groups.google.com/group/chromium-extensions/browse_thread/thread/45cd115d4bbef812/59abde3ca7c6706b
>
> http://groups.google.com/group/chromium-extensions/browse_thread/thread/fe9eaa2ad84f2219/e5588e58dc9fbdd8
>
> Thanks,
>
> Marcus
>
> --
>
> You received this message because you are subscribed to the Google Groups 
> "Chromium-extensions" group.
> To post to this group, send email to chromium-extensi...@googlegroups.com.
> To unsubscribe from this group, send email to 
> chromium-extensions+unsubscr...@googlegroups.com.
> For more options, visit this group at 
> http://groups.google.com/group/chromium-extensions?hl=en.
>
>
>

--

You received this message because you are subscribed to the Google Groups 
"Chromium-extensions" group.
To post to this group, send email to chromium-extensi...@googlegroups.com.
To unsubscribe from this group, send email to 
chromium-extensions+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/chromium-extensions?hl=en.


Reply via email to