3 ms·
I trust a company whose existence depends on keeping my passwords secure over my own ability to keep my personal server secure. It's not just ssh and gpg, it's
by Dayshine 10y ago
I trust a company whose existence depends on keeping my passwords secure over my own ability to keep my personal server secure.
It's not just ssh and gpg, it's every single service you have running on it, every piece of hardware and the OS itself.
- jbg_ 10y agoNo. If gpg does its job you could even host the passwords in a public github repository. Several pass users do this; I used to, but my server has better availability than github over the last few years so I switched after being frustrated at not being able to sync new passwords to my phone a couple of times.
- jbg_ 10y agoSo, to be fair, I misspoke when I said I rely on the security of gpg AND ssh. Really, it all comes down to the security of gpg. I feel pretty okay about that.