3 ms·
That's quite ... Clever. Now I can version my mbsyncrc and even my shell history without worrying about secrets leak.
by RMPR 5y ago
That's quite ... Clever. Now I can version my mbsyncrc and even my shell history without worrying about secrets leak.
- chrisweekly 5y agoBe sure to protect those secrets though -- see eg peer comments about process params (made shortly after yours)
- tyingq 5y agoRegular gpg does have a --passphrase-fd argument that's nice for this sort of thing. Where you can specify which file descriptor the passphrase/password is coming from. Very handy for integrating with scripts.