CSV is dead, long live credential exchange
summary
A new credential exchange standard defines a portable JSON format for full vaults (accounts, collections, items, passkeys, cards, SSH keys) plus a protocol that uses HPKE encryption to keep exports encrypted end to end. A cross‑vendor demo with Google Dashlane Bitwarden NordPass proves platform flows and QR/hybrid device transfer; exports are configurable and preserve sharing structures. Passkeys migrate as the same key material (passkeys migrate unchanged), so key rotation remains a separate user or RP action. Drafts are on GitHub with a review draft target by Q1 next year.
AI-written summary · about
chapters (9)
- 0:00Introduction and setup
- 1:50Problem with current credential sharing
- 4:41What is credential exchange
- 8:40Encryption protocol details
- 10:48Demo and cross-platform use
- 12:24Future use cases and possibilities
- 15:14Current status and timeline
- 16:39Call for feedback and open standards
- 17:00Q&A session
related talks
09mCredential Format Comparison SIG- 09mCredential Format Comparison SIG
29mKeys, Certs and Vault: From DevSecOps to Post-Quantum
01h 06mPassbolt Keynote
52mPasskeys: The Good, the Bad and the Ugly
27mVault Futures: The Roadmap Ahead for Vault
28mVaultPass: Enabling Teams to Share Secrets Confidentially
40mA Better Way To Manage Secrets