Remove Strongbox

[anon29374801]

@Critical_Crab5543

The way I like to think about this is that if Strongbox wasn’t yet recommended by PG and we would evaluate it now with all the facts that we have, would we really choose to recommend a proprietary password manager developed by a single guy who we know is lying about his product being open source? I don’t think we would.

@jonah went over this scenario with 1Password (which I think is apples to apples).

@jonah

Another way to put this is: Would I agree with adding 1Password to the list today if it wasn’t on there already? Probably not.

However, is there a substantial reason to remove 1Password from the list today given that it is already on there? No, I don’t think this is the case either.

The question is, is there a substantial reason to remove Strongbox from the list today given that it is already on there? I am not sure Strongbox being reliant on one dev (something other recommendations have had) or not being open source is “substantial” enough.

---

I could be convinced one way or the other. I just think its important to focus the conversation based on the precedent that has already been set for this category.

Personally, since the process to add a tool is so rigorous, it seems to me the bar for removal should be set very high. Since Strongbox still meets all the criteria and, since it seems like they removed saying they were open source (correct me if I am wrong). I don’t see enough here to remove it.