[image] Skiff Pages/Drive (Productivity Tools) We require both productivity tools and notebooks to be open-source This is interesting requirement considering that you recommend 1Password, a closed source password manager that arguably protects even more sensitive data. So, your stricter requir…

[image] anon29374801: Which I pointed out. But you were using that as a point against open source when it’s not.

[image] fria: But you were using that as a point against open source when it’s not. Its all the same. In that, we already have criteria covering these “benefits” that people are using as reasons why open source should be a criteria for password managers.

Regarding audits being a replacement for FOSS, I will just quote a piece from GrapheneOS: The benefits of a group unfamiliar with the code spending a short time doing a shallow review are greatly overstated in marketing. [image] GrapheneOS Frequently Asked Questions Answers to freque…

Honestly this feels more like an argument for why the criteria should be changed to be regular audits and not “a published audit”… Obviously GOS is very proud of being open source but, I am not sure their commitment to easily reviewable code and having “relationships with security researchers and o…

[image] Anon47486929: so I don’t think PG would need to disqualify Proton Pass. So the requirement for minimum would be open source clients, and best possible situation would be open source stack (client and back end both). If the criteria for PWMs are changed to include a requirement for ope…

It would seem so, we now have a proper term to work with.

[image] Niek-de-Wilde: Points frantically in the direction of Heartbleed What? The FOSS community did wise up and numerous forks and alternative implementations emerged in the wake of Heartbleed (for example, AWS switched to its own formally-verified, nimble TLS implementation). Not to menti…

Do not take that comment to seriously, I was obviously joking around there. :wink:

Alright, coming back to this. I still don’t really understand the motivation behind removing well-regarded products solely because of their source code licensing (or lack thereof). Historically we have only removed recommendations when something happens that directly impacts people’s privacy negati…

Privacy Guides Community

Require Open Source for Password Managers

Site Development

anon48875053 November 24, 2024, 7:28am 119

Now that Jonah has decided that PG sees open source as defined by OSI, could we proceed with this requirement?

Topic		Replies	Views
Denote source availability for recommended tools Site Development	20	768	September 15, 2024
Should I use Bitwarden, Proton Pass, or 1Password? Questions	43	22852	June 12, 2025
Remove 1Password Tool Suggestions rejected	80	8073	August 22, 2025
Proton Pass web (early access) General	5	745	December 26, 2023
Remove Strongbox Tool Suggestions completed	35	5280	March 14, 2025

Privacy Guides

Massive organizations are monitoring your online activities. Privacy Guides is your central privacy and security resource to protect yourself online.

Privacy Guides is a non-profit, socially motivated website that provides information for protecting your data security and privacy.

We do not make money from recommending certain products, and we do not use affiliate links.

Knowledge Base

Private Web Browsers

Top VPN Providers

Privacy-Respecting Services

Software Recommendations

More Resources

Require Open Source for Password Managers

Related topics