Connecting to the internet

[bdrwioo]

HI,

newbie here.

what/why is KeePass trying to connect to when KeepassRPC is used?

After adding the KeepassRPC plugin my firewall asks for permission for KeePass to connect to a cloudfront.net address. I block the connection and Kee still works in Firefox so why the need to connect to the Internet?

Thanks

[luckyrat]

Funnily enough I was just discussing this in a seemingly unrelated thread:

Kee shows a lot of wrong matches

I think that you could have your database configured to search for domain matches (which is the default) but on one system, KeePassRPC is unable to determine what the domain name for each website is. To do this, it needs to download the relevant data from the Public Suffix List service (and store it on disk for later use). If it can never connect to the internet to collect this data, it will have to fall back to hostname matching which in some cases (such as the accounts.google.com example) wil…

Cloudfront is one of the largest CDNs on the internet so it’s not a surprise that the PSL service is hosted there, although there’s certainly no guarantee it will remain that way. Nor is there a guarantee that it is the PSL that your KeePass instance is trying to connect to - you’d have to dig into more details in a network and/or process monitoring tool to prove this or look through the source code to verify where the plugin connects to.

Essentially, KeePassRPC will not work very well without access to the internet, but it will still function to a degree, and in a way that ensures the fallback behaviour is stricter so no security or privacy problems are introduced if it is unable to connect to the internet for any reason.

[luckyrat]

This new documentation goes into some detail about what could go wrong if KeePassRPC is unable to connect to the internet.