Marco
Clipperz co-founder

————-
Why should I trust Clipperz with my passwords?
Why should I put my sensitive data in the Internet?!

Clipperz let you submit confidential information into your browser, but
your secrets are locally encrypted by the browser itself before being
uploaded to Clipperz. You are not providing Clipperz any data, just a
bunch of scrambled bits.

With Clipperz we introduced a new paradigm: the zero-knowledge web
application . A breed of web apps where the provider is simply in
charge of delivering the Ajax application to the user’s browser and then
storing user’s data in an encrypted form on its servers.

The keys for the encryption processes are derived from a passphrase known
only to you! As a consequence, Clipperz will not be able to recover a
lost passphrase because we don’t know it. Actually we don’t even know the
username you have choosen!

Clipperz does not use homemade cryptographic algorithms but implements
standard strong encryption schemes (AES, SHA2, Fortuna, SRP, …).

Since Clipperz is a huge Javascript application, you can review the
source code anytime you like. The whole source code is downloaded to your
browser before you sign-in, so you can easily check if it is a genuine
version. (more info about performing a security code review is available
at the website)

You can even include our Javascript code in your web applications since
we released the Clipperz Crypto Library under a BSD license.
You can download it here: http:/code.google.com/p/clipperz

For any further information send an email to feedback@clipperz.com
Or visit the discussion group http://groups.google.com/group/clipperz

Many thanks,
Marco