KeePassX - is updating secure?

[Searchernow]

I am reading the manual on using KeePassX, which I have installed through LL.

I would like to use it but the following article gives me pause to re-consider before I place all my logins in it.

I know the article refers to Kee Pass, and that that is not the same as KeePassX, but presumably the same organization.
https://lifehacker.com/keepass-vulnerabi...1781486764 

There is a link  https://bogner.sh/2016/03/mitm-attack-ag...ate-check/    in the article to a discussion on potential mitm etc. attacks. The gist is to check update downloads manually, but in the case of LL the updates are done by LL, so hopefully they're all via https?

I tend to trust Electronic Frontier Foundation recommendations, and LL, but the fact that KeePass were using http for updates not so long ago makes me a bit wary.
But maybe all this has been addressed?

I'm fairly new to Linux, so not well versed in the tech side of all this.

[banko]

A good question.

[Valtam]

https://superuser.com/questions/878902/w...d-keepassx
https://wiki.archlinux.org/index.php/KeePass

[banko]

Thanks boss 

[ptyerman]

I've installed KeepassXC (https://keepassxc.org/) on mine, it's great at what it does and includes a tray icon. It also uses the same database files as Windows Keepass (KeePass 2.x (.kdbx)) and can import Keepass 1 files too. I find it a lot more friendly than KeepassX. It integrates with the browser using the PassIFox plug-in and works great.

[Searchernow]

Thanks Jerry,

I can see now it's a different app.

I will set it up as per manual etc.

[Valtam]

No problem. A bit of advice, I would stay away from browser plugins. This is a great attack vector for hackers. The application itself should be fine, but attacking browser extensions is very easy.

Sent from my Mobile phone using Tapatalk

[Searchernow]

Yes, I did get wise to that, and my fresh install has just 2 plug-ins in Firefox, both from the EFF, https everywhere and privacy badger. The latter is said to be based on Adblock+ and does in fact block most ads.

Not a plug-in as such, but Firefox does use Disconnect.me in Private Browsing mode, but my paranoia reserves are sorely depleted right now, so I'll carry on regardless.