4 ms·
Why not simply use PASS with your Keybase gpg key?
by rrggrr 9y ago
Why not simply use PASS with your Keybase gpg key?
- woodruffw 9y agoWell, I wanted something with structured records. `pass` can sort of do that, but it's not built into it. I also wanted to take advantage of KBFS to do the encryption transparently and expose records as individual files. KBSecret just provides a structure; you can use plain old shell scripts (and I/O primitives) to access your records once they're in place. It's more of an experiment than anything else currently, but those are the two big motivating ideas.
- rrggrr 9y agoMakes sense. Do we know if KBFS is deemed cryptographically secure? I haven't kept up on it.
- woodruffw 9y agoI don't know if there's been a formal audit, but they've published an overview of their cryptographic methods and practices [1]. They've also open-sourced KBFS itself and the `keybase` client [2][3], but again, not sure on the audit. [1]: https://keybase.io/docs/crypto/overview https://keybase.io/docs/crypto/overview [2]: https://github.com/keybase/kbfs https://github.com/keybase/kbfs [3]: https://github.com/keybase/client https://github.com/keybase/client
- shusson 9y agoI started using pass last week after a post on HN, loving it so far.
- swalladge 9y agoOr even just use Pass as normal, setting the password store directory to a path in your KBFS vfs. Two layers of encryption + standard Pass usage. :D
- rrggrr 9y agoHow do you specify the pass file directory?
- swalladge 9y agoThe original pass program allows overriding the default directory with the PASSWORD_STORE_DIR environment variable. I use gopass [0] though which supports directly configuring this via cli/config file. [0]: https://github.com/justwatchcom/gopass https://github.com/justwatchcom/gopass