News for hackers. Stuff that matters.
Re:Accidentally destroyed production database on first day o... by posixplz on Monday June 12, 2017 @02:59PM (#14539994)
A response 8 days later is better than no response at all, right? :)

I agree that a multi-recipient GPG protected file is sufficient for a small org. In fact, that's how I used to do it Circa 2011. We found it worked quite well - we committed the GPG protected files to a version control system (git) and used githooks to make sure that only encrypted files were permitted, preventing users from intentionally/accidentally defeating gitignore.

There are no comments on this comment yet.