Re:Crypto Tools for DevOps: Git-Crypt – Tozny
by yeukhon on Monday April 10, 2017 @03:44PM
(#14081902)
I am not arguing you can't implement a solution. You literally just repeated what I said by specifying A specific implementation. My point earlier is that you will never be able to keep anything secret. There is always a point of trust you have to give up and hope your extreme defense system doesn't crack / expose.
[ Parent
| on HN ]
Re:Crypto Tools for DevOps: Git-Crypt – Tozny
by peterwwillis on Monday April 10, 2017 @05:54PM
(#14082893)
Ah, I thought you were just saying it's too complicated. Of course nothing is totally secure. But there is a point where "extreme" mitigations are called for, and not considered extreme, and the scope of potential problems of trust can be limited.