Hello there for an online Tool which offers the feature of storing passwords online I want to implement the following process:
This key is saved within the users browser but never transfered online
The encrypted password is transferred (via SSL anyway) to the online key storage and saved there
Therefore even in case of MITM or even if the server is compromised the data for a possible attacker is useless.
How can I store such a secret key in a local browser (do you know a good possibility) and how can i export the key?
Thanks for your help!