3 ms·
It would be nice if there was a reasonable baseline of key format/management that all these new tools shared though. And I don't mean pgp/gpg keyrings, to be cl
by stormbrew 5y ago
It would be nice if there was a reasonable baseline of key format/management that all these new tools shared though. And I don't mean pgp/gpg keyrings, to be clear, which are cumbersome and error prone and over-complicated for a lot of these needs (I'm still annoyed that `pass` is reliant on gpg for forcing me to deal with a keyring).
I see that `age`, which I hadn't actually heard of before, supports ssh keys and identities which always seemed like a fairly natural baseline to me. Would be nice if more of the command line variety did as well (even if only rsa and/or ed25519 keys).
- tptacek 5y agoWhy? Why is that good? One of the basic cardinal sins of cryptography is using the same key in more than one context. I don't understand the value of the SSH thing, either.
- neolog 5y agoWhat is a "context"? I don't want to manage a ton of key files on my desktop computer.
- stormbrew 5y agoI don't want to use the same key in multiple contexts, but I think some norms around how keys are stored would help build best practices around them. It would also potentially mean easier to use with hardware tokens, if you could just expect to be able to use something like gpg-agent or ssh-agent or something in between to work with various things.
- tptacek 5y agoFair enough, that's a good answer. Thanks!
- Avamander 5y agoHardware cryptographic storage comes to mind, or simply key management and storage is complex with multiple keys in a lot of different forms.