Re: git-secret - store your private data inside a repository
- From
Robin H. Johnson <robbat2@gentoo.org>
- Date
- Mar 14, 2016, 18:04 UTC
- Message-ID
- <robbat2-20160314T172243-113693201Z@orbis-terrarum.net>
- In-Reply-To
- <CAO_bL1y8tp5+NKdPqpwqJvX2xWY6Wg1oZbnRTKAVjKrg94b3BA@mail.gmail.com>
On Mon, Mar 14, 2016 at 10:22:43AM +0300, Никита Соболев wrote:
Show 7 quoted lines
> Robin, thank you for interest. > > I have not seen 'pwstore' before, but I don't like the idea to store > headers inside the file. As it might break things. But I love the idea > of groups and access rights. It is a direction I would like to follow. > Also I like your suggestion about the key's white-list. That's a > feature I have already planed for the future releases.
Maybe using notes for the ACL metadata would work out, not sure.
Show 8 quoted lines
> I guess 'pass' was made for a single user. But 'git-secret' was made > for multiple people. So you can invite someone to share your encrypted > files and easily remove them. Also, I have noticed that 'pass' stores > the encrypted files in the separate repository. Well, that's an > arguable way to go. It has some benefits like: code-repository and > pass-repository may have different access rights, different people > involved. But there's a lack in consistency when you have two separate > repositories.
Yes, 'pass' did start for a single user; and added per-folder access groups later. It's also that it aims to be a simple secret storage tool (no random blobs), with an optional Git backing (simply making the directory versioned), rather than secret-storage-for-any-git-repo.
I included pass also because it has some nice UX (IMO).
-- Robin Hugh Johnson Gentoo Linux: Developer, Infrastructure Lead, Foundation Trustee E-Mail : robbat2@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85