4 ms·
Stored encrypted using gpg, in a git repo which is synced using syncthing: https://www.passwordstore.org/ https://www.passwordstore.org/
by mike-cardwell 4y ago
Stored encrypted using gpg, in a git repo which is synced using syncthing: https://www.passwordstore.org/ https://www.passwordstore.org/
- worldsavior 4y agoFYI, gpg is soon considered insecure, even now.
- aidenscott2016 4y agoYou can’t make a statement like that without clarifying what you mean and sharing some alternative to gpg
- worldsavior 4y agoIt's less about the algorithm, but more how gpg/pgp is constructed/used. No forward secrecy, leaks info, bad text authentication, and other. Those things maybe can be fixed, but they're not. https://latacora.micro.blog/2019/07/16/the-pgp-problem.html https://latacora.micro.blog/2019/07/16/the-pgp-problem.html Edit: an alternative for file encryption is age, fast simple and secure. Signing is signify.
- tmtvl 4y agoWhat would you recommend, NaCl? Signify?
- worldsavior 4y agoI would recommend using signify. That's what security researchers also recommend. Simple and elegant tool, designed to only signing, unlike gpg which is used for encrypting and signing as well.
- deleted 4y ago[deleted]
- mike-cardwell 4y agolol