5 ms·

Distribute your public keys via DNS TXT records: https://www.go350.com/posts/age-file-encryption/#age-pki-issues https://www.go350.com/posts/age-file-encryptio

by _wldu 5y ago

Distribute your public keys via DNS TXT records: https://www.go350.com/posts/age-file-encryption/#age-pki-issues https://www.go350.com/posts/age-file-encryption/#age-pki-iss...

judge2020 5y ago
That only creates a link between SSH keys and a domain; It's even worse than relying on GitHub since you have to trust that multiple account haven't been hacked (registrar + DNS) and that neither the DNS host nor the registrar are acting maliciously.
- _hyn3 5y ago
  I agree. DNS is its own bundle of insecurity.
- CameronNemo 5y ago
  Psst. Github has all that stuff too. Just more because it is a growing and changing webapp instead of an ancient, solidified key value store.