20 ms·
Very good point, it's pretty crazy that these systems don't seek authorization for each secret retrieved. Do you have recommendations for software-only solutio
by throwaway984393 5y ago
Very good point, it's pretty crazy that these systems don't seek authorization for each secret retrieved.
Do you have recommendations for software-only solutions that do this? ssh-agent has an option for it, not sure if anything else does (pass?)
- lrvick 5y agoThere can be no pure software solution to this. If your OS is compromised you are hosed without dedicated and trusted external hardware as a gatekeeper.