Feature Request: SpiderOak Support

MuppetGate

Another vote for SpiderOak

[Deleted User]

Hello Muppet Gate and welcome to the Forums!



Thanks for your vote!



Cheers!



Brandt

greptrick

+1 for spideroak, given the newly updated TOS for Dropbox I am moving everything off.

khad

Thanks for the vote, greptrick! We're still checking out other sync solutions but so far none of them work on a technical level for the demanding nature of 1Password.



You might be interested in [url="http://blog.agilebits.com/2011/07/dropbox-terms/"]our latest blog post about the Dropbox Terms[/url] which also discusses alternative cloud sync solutions.



Cheers,

Mouna

The same here. Just registered to the forum to +1 SpiderOak support <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/smile.gif' class='bbc_emoticon' alt=':)' />

khad

Welcome to the forums, Mouna, and thanks for the vote. Unfortunately, as I mentioned above, unless SpiderOak makes some changes, it is not currently suitable on a technical level for 1Password syncing. Who knows what the future holds, though? I am always optimistic. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />

Dave Abrahams

[quote name='khad' timestamp='1304728108' post='26476']

That said, if everyone demands SpiderOak support and refuses to use Dropbox, I can't imagine we would drag our heels for very long at all. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />

[/quote]



For the record, I demand SpiderOak support, though I haven't begun refusing to use Dropbox (but [url="http://www.schneier.com/blog/archives/2011/05/dropbox_securit.html"]now that they've been hacked[/url], I will soon) <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_wink.png' class='bbc_emoticon' alt=';-)' />

[Deleted User]

Hello Dave!



Thanks for adding your vote for SpiderOak! As Khad stated in the previous post, in its current form, integration with SpiderOak is not an option.



Also, thanks for providing the link, although I'm not sure your assertion that Dropbox has been hacked is accurate. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/smile.gif' class='bbc_emoticon' alt=':)' />



I'm a fan of Bruce Schneier, and I enjoy reading his blog. I've read the blog post provided by your link, and I also read the article Bruce refers to as "an excellent summary article from [i]The Economist.[/i]"



In [i]The Economist[/i] article, I am particularly comforted by the following statement:



[quote]Dropbox security can be enhanced quite easily, too, by the use of third-party encryption software that manually or automatically manages encryption for files in the cloud-synced folder as well as elsewhere on a computer.



[i]source: [url="http://www.economist.com/blogs/babbage/2011/05/internet_security"]The Economist: Keys to the cloud castle[/url] [/i][/quote]

1Password does exactly that!



All encryption takes place on your device (i.e., desktop/laptop/mobile device) [b][i]before[/i][/b] being synched to Dropbox. Granted, 1Password manages only your 1Password data file ([i]1Password.agilekeychain[/i]), but protection of your passwords and other vault data is the primary concern of members on our Forums.



Thank you again for letting us know you would like to see SpiderOak as an alternative to Dropbox. However, I hope your concerns regarding the security of your 1Password data are assuaged.



Cheers!



Brandt

Chris Peden

I want to second my increasing distaste for dropbox. Their security problems are becoming too common and their TOS is not encouraging. I would like to see any of the following options for cloud sync options



iCloud, SugarSync, Box.net, SpiderOak, Waula

khad

Thanks for the votes, folks.



For the record, Dropbox was not hacked, and that old Derek Newton post to which Bruce Schneier linked was [url="http://forum.agile.ws/index.php?/topic/4451-security-dropbox-authentication/"]discussed in depth in the Lounge three months ago[/url]. Let's dial the FUD down a notch. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_wink.png' class='bbc_emoticon' alt=';-)' />



Also, there is nothing unusual about [url="http://forum.agile.ws/index.php?/topic/5406-dropboxs-terms-of-service/page__view__findpost__p__31423"]Dropbox's Terms of Service[/url].



Please keep this SpiderOak support feature request thread on topic.. If you wish to discuss other tangential issues, please [url="http://forum.agile.ws/index.php?/forum/7-agile-lounge/"]join us in the Lounge[/url]. I would love to see you there!



Cheers,

allanster

Bump and +11 (yes but this one goes to eleven) for SpiderOak!



Long time user of 1Passwd and recently just upgraded to 1Password family license.



Registered just to add my two cents on this issue. This is a no brainer marriage made in heaven. Strong password manager and strong cloud storage. I understand that 1Password files are safe on DropBox, the point is those of us worried enough about password management security are also likely to be equally worried about our cloud storage security. I don't want to keep up with two services, I want one service where I can store both all of my sensitive files and my photos of my pet (or whatever) and not have to worry about it.



I also do realize that this is going to require cooperation from SpiderOak, which brings me to my second point, everyone in here bugging Agile needs to also be bugging SpiderOak! They're obviously already aware since they've posted earlier in this thread, but it never hurts to squeak your wheels. I've already emailed them my thoughts that this could be an excellent opportunity to capture some of Agile's large user base, but we need to all chime in!



[email="support@spideroak.com"]SpiderOak Support Email Address[/email]

khad

Welcome to the forums, allanster! Thanks for the additional feedback.



[url="http://blog.agilebits.com/2011/07/dropbox-terms/"]From our recent blog post on the subject[/url]:



[indent=1]Dropbox does two things that no other system (yet) does. It provides the necessary programming tools (APIs) for all of the platforms that we support: OS X, Windows, iOS, Android, and Windows 7 Phone; and it provides syncing to truly native filesystems on the Mac and PC.[/indent][indent=1]The short answer to “Have you considered X as an alternative sync solution” is “Yes” for every value of X that people have asked about. We have considered them, and have had to reject them for various technical reasons.[/indent][indent=1]…[/indent][indent=1]Everything else we’ve looked at (and we have looked at many things) suffers not only from the same problems we saw with WebDAV, but they also lack usable APIs for all the platforms we need to support. It may be possible, for example, to sync data to an Android or iOS device using SugarSync or Wuala, but it isn’t possible to sync that data in a way that would make it available to 1Password on those devices.[/indent]



We continue to monitor developments which pertain to this aspect of 1Password's functionality. We would be doing a disservice to ourselves and our customers if we just rested on our laurels.



Thanks for your passion for this!

ndw

Another +1 for SpiderOak support. For the Android client, please, in my case.

[Deleted User]

We're not saying 'never' to SpiderOak support, but as has been mentioned many times in this thread, SpiderOak don't provide us with the true mobile APIs that we'd need to support their service across all platforms, including Android, and so at the moment is a no go.

steveh7

Hi, just adding another +1 so I can follow this thread and so you can see another vote. I understand you can't technically do it right now and don't need a reply :)

poncho

I first used Spideroak about two or maybe three years ago. It's just got better. Nice interface too. Would really like to use it instead of Dropbox, as no longer trust it.

momen

I was about to move my 1Password file to a synced folder with SpiderOak but decided to google it first and luckily I found this thread. Thanks for the info as if I have gone through with the sync attempt, it wouldn't have worked and I would be pulling me hair trying to make it work <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/smile.png' class='bbc_emoticon' alt=':)' /> So thanks for this thread and +1 for SpiderOak!

[Deleted User]

Glad you found the thread first, momen, nothing's worse than pulling out hair without reason.



We're certainly keeping our options open, but the same situation remains that SpiderOak do not yet provide a true mobile API for us to use, without that it's a no go.

sirgad

Hi,



I'd just like to add my vote for a client-side encryption option for 1Password syncing, whoever the provider might be.



I understand that it's a matter of DropBox competitors offering the same range of services and APIs as DropBox before this can happen, so I'll be emailing SpiderOak (actually I already have) and Wuala to show my support for the development of the required features in their services. I'm also going to email DropBox to request that they offer a client-side encryption option for their service.



Perhaps the best workaround is a second layer of encryption around the keychain itself explicitly for syncing purposes? That way it's an AgileBits matter, nothing to do with the remote sync service provider.



Anyway, I'm sure you guys have discussed this at length already.



Regards,



S.

khad

Thanks for the vote. I'm sure you already realize this, but your 1Password data is already encrypted by 1Password client-side. We'll continue to keep an eye on the sync landscape.



Cheers!

benfdc

[quote name='khad' timestamp='1312628611' post='37194']

We continue to monitor developments which pertain to this aspect of 1Password's functionality. We would be doing a disservice to ourselves and our customers if we just rested on our laurels.



Thanks for your passion for this!

[/quote]

You can add me to the list of people who would like to see something happen here.



I posted in the SpiderOak forums, pointing them to your explanation of why 1P isn't supporting other sync services at the moment.



[url="https://spideroak.com/forum/threads/id/1426/"]https://spideroak.co...hreads/id/1426/[/url]



Will report back here if I get a response.



—Ben F



p.s. I note the observation in the blog post that SpiderOak lacks a Windows 7 Mobile client. So does 1Password. Both Windows Mobile and Blackberry are on the [url="https://spideroak.com/mobile"]SpiderOak Mobile roadmap[/url].

khad

Thanks for your passion for this, Ben! Unfortunately, a mobile client on a specific platform isn't helpful to us since all apps are sandboxed. That Dropbox has an iOS app, for example, does not have any bearing on our ability to integrate with Dropbox (the service) in our own iOS app. We don't hook into the Dropbox iOS app. This is not possible with existing iOS security measures, therefore the Dropbox app does not even need to be installed on your iOS devices in order for 1Password's self-contained Dropbox integration to work.



What we need is a mobile API for integrating a service directly into our app(s). Dropbox provides this. Not much has changed since I quoted the blog post of ours in my August 6th post above. I've added some emphasis:



[indent=1]Everything else we’ve looked at (and we have looked at many things) suffers not only from the same problems we saw with WebDAV, but they also lack usable APIs for all the platforms we need to support. It may be possible, for example, to sync data to an Android or iOS device using SugarSync or Wuala, but it isn’t possible to sync that data [b]in a way that would make it available to 1Password on those devices[/b]. [/indent]

We'll keep an eye on this as always.



P.S. We do offer [url="http://forum.agilebits.com/index.php?/forum/20-1password-for-windows-phone-7/"]1Password for Windows Phone 7[/url]. <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />

benfdc

[quote name='khad' timestamp='1318985849' post='53056']

We don't hook into the Dropbox iOS app. This is not possible with existing iOS security measures, therefore the Dropbox app does not even need to be installed on your iOS devices in order for 1Password's self-contained Dropbox integration to work.



What we need is a mobile API for integrating a service directly into our app(s). <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />

[/quote]

Interesting. I guess this explains why so many iOS apps sync via Dropbox.



I suspect that SpiderOak will never have an API of this nature, because it's block-oriented rather than file-oriented on the server side. Only the local clients know about files; SpiderOak's servers store sequentially-numbered encrypted blobs.

khad

[quote]I guess this explains why so many iOS apps sync via Dropbox.[/quote]

Ben++ That's about the long and the short of it, yeah. <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/skype_wink.png' class='bbc_emoticon' alt=';-)' />



I don't know that it would be impossible for SpiderOak to provide a mobile API, but at this moment they do not provide one. We'll certainly take a look at it if they do!

benfdc

It's certainly not my place to say "never" on SpiderOak's behalf, but let's just say that I'm not going to hold my breath. Thanks for the explanation, though. It helps me to adjust my expectations. <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/skype_wink.png' class='bbc_emoticon' alt=':wink:' />

benfdc

[quote name='khad' timestamp='1319173518' post='53162']

Ben++ That's about the long and the short of it, yeah. <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/skype_wink.png' class='bbc_emoticon' alt=':wink:' />



I don't know that it would be impossible for SpiderOak to provide a mobile API, but at this moment they do not provide one. We'll certainly take a look at it if they do!

[/quote]

Actually, I forgot about SpiderOak ShareRooms. If a 1Password keychain is stored in a ShareRoom, there is a [url="https://spideroak.com/faq/how_do_i_use_the_spideroak_web_api"]Web API[/url] for file access, as well as [url="https://spideroak.com/blog/20100311173000-introducing-the-spideroak-web-api"]other advanced APIs[/url] and javascript tools for navigating the folder structure of a ShareRoom. That second link includes contact info.



Perhaps you've already explored this with the SpiderOak folks and their APIs don't suffice for your purposes. Or perhaps there's hope after all.



—Ben

benfdc

I also note that GoodReader seems to have the same ability to read/write/sync to a SugarSync folder as it does to a Dropbox folder.



[url="http://www.goodiware.com/gr-man-tr-servers.html#sync"]http://www.goodiware...rvers.html#sync[/url]



Perhaps your Web API needs are greater than those that suffice for GoodReader, but how would I know?



I have the impression that the SpiderOak Web API for ShareRooms may be view-only. If so, one would not have the sort of two-way functionality that is possible with Dropbox. That might be an acceptable tradeoff for some of your users, though.



—Ben

khad

Great points! I'll have to defer to some wiser guys than I for the specifics, but my guess is that they have already evaluated these options. I always seem to be one step behind them. <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />



I'll see if I can't get a more definitive answer for you.

benfdc

From the SpiderOak forum thread I mentioned above:



[quote][b][url="https://spideroak.com/forum/threads/id/1426/#snap_post10638"][img]https://spideroak.com/static/images/icon-16x16.png[/img] JoCoWash [/url][/b][left]1 week and 3 days ago[/left][left]



[color=#666666][font=arial, helvetica, clean, sans-serif][size=3]Hello,[/size][/font][/color]

[color=#666666][font=arial, helvetica, clean, sans-serif][size=3]It would be a pleasure to work with 1Password. It is excellent software and there is a great demand from our users. Thank you very much for your feedback. It is appreciated. We are currently developing a way to make 1Password compatible with SpiderOak. So please follow us - Twitter, Facebook, our Blog for updates as we continue developing.[/size][/font][/color]

[color=#666666][font=arial, helvetica, clean, sans-serif][size=3]Thanks![/quote][/size][/font][/color]



[/left]

Dmac348

[color=#282828][font=helvetica, arial, sans-serif]+1 for SpiderOak.[/font][/color]