1Password, Dropbox & DropDAV: Security

jwf

I use Dropbox to sync my 1Password data file between devices (computers, iPhone, iPad.) Because Dropbox & Pages for iPad don't play nicely together, I'm intrigued by the apparent usefulness of DropDAV as a conduit between the two. But I'm concerned about giving my Dropbox credentials to DropDAV given that my 1Password data lives in Dropbox. Anyone have thoughts?

thightower

Just my personal note. I also have been hesitant with dropdav. As for security tho Ill let one of the team reply to that.



On a different note visit the Dropbox votebox and vote for webdav access nativly from Dropbox. Last I checked it had almost 15k votes.



https://www.dropbox.com/votebox/122/webdav-support

thightower

I think this may be a reply to you in the Dropbox forums.



http://forums.dropbox.com/topic.php?id=35405&replies=2



just included here for the team I would reply more but this bouncing car on I-26 is not helping. Ill followup with a cross post back there if I ever arrive at my hotel.

[Deleted User]

Hi jwf,



I personally use DropDAV for exactly the same reasons you're describing to access my Dropbox data within the iWork apps on the iPad. From what I can tell they use SSL to handle the actual transfer of your data, hence the https:// as part of the setup, and as such I'm pretty comfortable using them to access my data.



On top of the security of Dropbox itself, the 1Password data in my 1Password.agilekeychain file is encrypted with 128-bit AES encryption, so anyone who did get into Dropbox would still have to break down that encryption as well.



I'm sure Jeff, or one of our other security gurus, will come in on this subject, but I wanted to add my own experience, DropDAV works very well, it's not a true sync though, which is a real shame. I often think I'd like Apple to buy Dropbox, but then I realise how bad that would actually be.





[quote name='jwf' timestamp='1301243912' post='23352']

I use Dropbox to sync my 1Password data file between devices (computers, iPhone, iPad.) Because Dropbox & Pages for iPad don't play nicely together, I'm intrigued by the apparent usefulness of DropDAV as a conduit between the two. But I'm concerned about giving my Dropbox credentials to DropDAV given that my 1Password data lives in Dropbox. Anyone have thoughts?

[/quote]

jwf

[quote name='stu' timestamp='1301256321' post='23368']

Hi jwf,



I personally use DropDAV for exactly the same reasons you're describing to access my Dropbox data within the iWork apps on the iPad. From what I can tell they use SSL to handle the actual transfer of your data, hence the https:// as part of the setup, and as such I'm pretty comfortable using them to access my data.



On top of the security of Dropbox itself, the 1Password data in my 1Password.agilekeychain file is encrypted with 128-bit AES encryption, so anyone who did get into Dropbox would still have to break down that encryption as well.



I'm sure Jeff, or one of our other security gurus, will come in on this subject, but I wanted to add my own experience, DropDAV works very well, it's not a true sync though, which is a real shame. I often think I'd like Apple to buy Dropbox, but then I realise how bad that would actually be.

[/quote]



Thanks; it's certainly reassuring to know that folks at 1Password are comfortable using DropDAV.

khad

From a security standpoint, it is not much different than using Dropbox to access your data. You might want to take a look at our "[url="http://help.agile.ws/1Password3/cloud_storage_security.html"]Security of storing 1Password data in the Cloud[/url]" document.



If we can be of further assistance, please let us know.



We are always here to help!