Tresorit Login

[Torsten Meyer]

Hi,

I tried out Tresorit (tresorit.com) and encountered some big problems in combination with Mooltipass Mini.

- As soon as I try to login using MM it happens from time to time (more often than not...) that the password and/or the login name is appearing in the URL of the website in form of ?password=xxxxxxxxx (login works, and after navigating around a bit at the website that information disappears and everything seems to be ok). The big problem with this is, that the URL could get synchronized with Google if the user has activated the Sync-Funcion in Chrome. Didn't try Firefox but I suppose there could be the same problem. That's the only site I encountered this strange behaviour so far.

- With activiated 2 Factor Authentication (no matter what kind) the website jumps back to the login screen as soon as the login and password were entered by MM. So no login is possible until 2FA gets deactivated.

Greets

Torsten

[mathieu...@gmail.com]

Hello Torsten,

Wow, that's a big problem indeed!

I wonder if this couldn't be explained by a poor handling of submit events on tresorit website...

Anyway, we'll investigate and fix it ASAP.

Regards,

Mathieu

--
You received this message because you are subscribed to the Google Groups "mooltipass" group.
To unsubscribe from this group and stop receiving emails from it, send an email to mooltipass+unsubscribe@googlegroups.com.
To post to this group, send email to moolt...@googlegroups.com.
Visit this group at https://groups.google.com/group/mooltipass.
For more options, visit https://groups.google.com/d/optout.

[mathieu...@gmail.com]

Hello Torsten,

We've recently pushed a newer version of our extension to our testers.

As tresorit needs a paid account, we unfortunately weren't able to check if that solved this bug.

Would you be able to uninstall your chrome extension, and install our testers only version (1.1.84) here?

https://chrome.google.com/webstore/detail/mooltipass-extension/mkjlelalgdinanmcljpgkojjolkdcebh

Thanks!
Mathieu

[Torsten Meyer]

Hi Mathieu,

the version shown in the store is 1.1.83 from 08.07.2017? Is 1.1.84 a typo?

Greetings

Torsten

Am Samstag, 15. Juli 2017 15:03:20 UTC+2 schrieb Mathieu Stephan:

Hello Torsten,

We've recently pushed a newer version of our extension to our testers.

As tresorit needs a paid account, we unfortunately weren't able to check if that solved this bug.

Would you be able to uninstall your chrome extension, and install our testers only version (1.1.84) here?

https://chrome.google.com/webstore/detail/mooltipass-extension/mkjlelalgdinanmcljpgkojjolkdcebh

Thanks!
Mathieu

On Sun, Jul 9, 2017 at 12:22 PM, mathieu...@gmail.com <mathieu...@gmail.com> wrote:

Hello Torsten,

Wow, that's a big problem indeed!

I wonder if this couldn't be explained by a poor handling of submit events on tresorit website...

Anyway, we'll investigate and fix it ASAP.

Regards,

Mathieu

On Sun, Jul 9, 2017 at 12:19 PM, Torsten Meyer <knodde...@posteo.de> wrote:

Hi,

I tried out Tresorit (tresorit.com) and encountered some big problems in combination with Mooltipass Mini.

- As soon as I try to login using MM it happens from time to time (more often than not...) that the password and/or the login name is appearing in the URL of the website in form of ?password=xxxxxxxxx (login works, and after navigating around a bit at the website that information disappears and everything seems to be ok). The big problem with this is, that the URL could get synchronized with Google if the user has activated the Sync-Funcion in Chrome. Didn't try Firefox but I suppose there could be the same problem. That's the only site I encountered this strange behaviour so far.

- With activiated 2 Factor Authentication (no matter what kind) the website jumps back to the login screen as soon as the login and password were entered by MM. So no login is possible until 2FA gets deactivated.

Greets

Torsten

--
You received this message because you are subscribed to the Google Groups "mooltipass" group.

To unsubscribe from this group and stop receiving emails from it, send an email to mooltipass+...@googlegroups.com.

[mathieu...@gmail.com]

Hi Torsten,

Nope... it was being pushed and now the store correctly display 1.1.84 :)

Mathieu

To unsubscribe from this group and stop receiving emails from it, send an email to mooltipass+unsubscribe@googlegroups.com.

[Torsten Meyer]

Ahh... OK :)

Well, login works now without the password and the username being shown in the URL (I tried it a few times now).

But there is still one little bug with 2 Factor Authentication. The login works and the 2FA-Screen appears. The extension seems to enter a string (or maybe just a Return without a string) to the Authenticator field and the Tresorit Page shows an error message on top of the page but stays on the page. So I can enter the right 2FA-Code and am able to login to the site.

Good so far, as it is now useable for Tresorit.

Greetings

Torsten

[mathieu...@gmail.com]

Hello Torsten,

Awesome, thanks for the feedback!

I'm afraid that without access to tresorit we won't be able to fix that tiny bug though :/. We'll however see if we can find other 2FA related problems, hopefully they may be the same as yours!

FYI you may keep that extension installed, as it gets our newest updates one or two weeks before they're pushed to the main one.

Cheers!
Mathieu

To unsubscribe from this group and stop receiving emails from it, send an email to mooltipass+unsubscribe@googlegroups.com.

[Torsten Meyer]

Hello again,

I'm happy that I can use it now. Thanks.

BTW: Tresorit offers a 14 days trial without costs ;)

Thanks again and have a nice weekend!

Torsten

[mathieu...@gmail.com]

Oh... then we shall try that then! Hopefully they won't ask for a credit card number ;)

Mathieu

To unsubscribe from this group and stop receiving emails from it, send an email to mooltipass+unsubscribe@googlegroups.com.

[Torsten Meyer]

They will ask for a CC # but won't charge you if you cancel the membership in time.

Greets

Torsten

[Torsten Meyer]

Ah, just one last information: in Tresorit's failed login history, each login is recognized with 3 failed attempts to login. So it seems the extension is entering something several times not just one time at the 2FA-Screen.

Am Samstag, 15. Juli 2017 16:13:54 UTC+2 schrieb Mathieu Stephan:

[mathieu...@gmail.com]

oh... we'll look into it then :)

thanks for all the info!

To unsubscribe from this group and stop receiving emails from it, send an email to mooltipass+unsubscribe@googlegroups.com.