3 ms·
very true, and thank you for pointing this out. this is an intentional design decision - you can see me rationale here: https://j3s.sh/thought/storing-passwords
by j3s 4y ago
very true, and thank you for pointing this out. this is an intentional design decision - you can see me rationale here: https://j3s.sh/thought/storing-passwords-with-age.html https://j3s.sh/thought/storing-passwords-with-age.html
it boils down to exactly what you noted - disk access is game over in most cases anyways, and i like the convenience of plaintext on the disk.
i will be exploring the yubikey model that filippo recently outlined though https://words.filippo.io/dispatches/passage/ https://words.filippo.io/dispatches/passage/ - so stay tuned! :D
- woodruffw 4y agoThanks for sharing your rationale! I tend to agree -- the practical alternative for Linux anyways is some kind of key agent, and it's unclear to me (having written a few password managers at this point, including an age-based one[1]) that the attacker model for an agent is any different. The only advantage is the "public" channel one I mentioned, and that can of course be done out of band. And since I forgot to say it earlier: excellent work! [1]: https://github.com/woodruffw/kbs2 https://github.com/woodruffw/kbs2
- j3s 4y agowow, extremely cool, ty! i'm excited to play with kbs2 when i find a little free time.