2 ms·
> Any possibility for sync capability across systems? It's a git repository. You can push it to a private github repo shared by your team. You could rsync. Yo
by exabrial 4y ago
> Any possibility for sync capability across systems?
It's a git repository. You can push it to a private github repo shared by your team. You could rsync. You could host the git repository on a flash drive and pass it around. Any method of syncing a git repository will work with password-store!
> this has risks for hardware/OS failure & online backup cracking
PGP is absolutely battle tested. You'd really have to screw the pooch on password selection to be subjected to a brute force offline attack. Even then, set your s2k-count setting for you PGP keys to something that takes 250ms or more and you'll make it impossible for even a state-level actor to brute force your keys.
For the ultra-ultra paranoid, users can keep PGP private keys on a hardware device like a Yubikey. This prevents the keys from ever being leaked (save local side channel attacks, but at the point your long screwed anyway).
- tomrod 4y agoThis is awesome!