3 ms·
i don't understand why people comfortable with running a vps bother with these cloud services. i use pass https://www.passwordstore.org/ https://www.passwordst
by 5- 5y ago
i don't understand why people comfortable with running a vps bother with these cloud services.
i use pass https://www.passwordstore.org/ https://www.passwordstore.org/ git sync'd (encrypted) to a $5/month vps that also runs many other things. you could even get a free one from large cloud providers.
pass has lots of clients for all kinds of platforms, works really well (how could it not? it's just a thin wrapper around git + gpg) and i don't have to worry about anything like the topic at hand.
what am i missing?
- Arainach 5y agoThere's a longer chain of trust and research required here. I need to trust the original authors, the authors of whatever Android client I want, the authors of whatever Windows client I want, and so on. I need to figure out what options are available and why I should trust them and I need to constantly continue doing so to make sure those apps aren't sold to some other party I don't trust. There's no simple mechanism for sharing. Many clients don't support using multiple stores. Even if they did, the UX is never one that I would be able to convince anyone other than a software engineer to use. Single-party centralized solutions offer a simplified trust model and a common auth service makes sharing and recovery much simpler.
- aborsy 5y agoThis set up is much more secure than online password management.
- Arainach 5y agoThe most secure system is one that no one can access or use.