2 ms·
> What risks & attack vectors do you have in mind here? People with deleted passwords not being able to access the old file, or really any kind of mistake bein
by marcosdumay 2y ago
> What risks & attack vectors do you have in mind here?
People with deleted passwords not being able to access the old file, or really any kind of mistake being irreversible.
- codethief 2y agoI'm afraid I'm still not following. Isn't the point of having a history precisely to be able to roll back in case of mistakes?
- marcosdumay 2y agoYou don't want a rigid history on the case of some mistake exposing the data. (Like a weak password.) Backups that you can erase work fine, but version control will create trouble.
- codethief 2y agoYeah, rotating the passwords when there is a possibility of a leak would be mandatory of course. (As it should be anyway.)