3 ms·
I use it indirectly with pass (passwordstore.org), which is one of the few security-related pieces of software I like. Do you have an opinion on that? I've neve
by rvense 5y ago
I use it indirectly with pass (passwordstore.org), which is one of the few security-related pieces of software I like. Do you have an opinion on that? I've never heard of age before, but it looks like a pass-like interface to it could be ejected in a few hours if one were so inclined.
Is the antipathy towards GPG based on it being too easy to misuse/misapply, or is it because it's broken when used properly?
- tptacek 5y agoI've heard nothing but good things about pass. There's also a pass that uses age now, which is I guess what I'd use if I was in the market for something like it. There's a point at which you're asking so little from your cryptosystem --- as is the case with local-only CLI password managers --- that it doesn't much matter that you're using PGP. I don't, like, recoil from .pgp.asc files! The place you really get in trouble with PGP is when you try to use it on email.
- rectang 5y agoThere was a link posted elsethread ( https://news.ycombinator.com/item?id=29715664 https://news.ycombinator.com/item?id=29715664 ) which reviews a lot of the issues with PGP: https://latacora.micro.blog/2019/07/16/the-pgp-problem.html https://latacora.micro.blog/2019/07/16/the-pgp-problem.html
- deleted 5y ago[deleted]
- nyolfen 5y agothere in fact exists a pass-like interface for age: https://github.com/FiloSottile/passage https://github.com/FiloSottile/passage