Package: keepassxc
Version: 2.7.7+dfsg.1-2
Followup-For: Bug #1069743

I see that my initial report got hijacked into a keepassxc should be 
keepassxc-full issue.
This is NOT what the original bug report is about, the split was mentioned in 
the NEWS file,
so this is not my concern. BUT if this is seen as issue, it should be a 
different report.

The original issue is simply, that in the hardened package, hardware key 
support should imho
still be present, as it enhances security of the keepass DB, rather then 
compromising it
(as networking, ... does).
I am not fimiliar with the keepass code, maybe hardware key support does open 
up an additional
attack vector, which is not obvious.

br m

Reply via email to