News for hackers. Stuff that matters.
Re:Git-secret – store private data in a Git repo by grogenaut on Monday May 09, 2016 @10:48PM (#11664864)
You're forgetting that if I have been storing all of the encrypted traffic all along and then get access to the keys I can unlock all of the history too. Once a secret is out of use it should be purged completely. This is why secrets should be stored on ephemeral storage if at all possible. This is however pretty advance for many people.
Re:Git-secret – store private data in a Git repo by daigoba66 on Monday May 09, 2016 @11:18PM (#11664952)
This is solved with perfect forward secrecy: https://en.m.wikipedia.org/wiki/Forward_secrecy
Re:Git-secret – store private data in a Git repo by nathancahill on Tuesday May 10, 2016 @12:06AM (#11665087)
Great! It's "solved". No need to worry anymore!