Passage: A fork of password-store that uses age instead of GnuPG

Re:Passage: A fork of password-store that uses age instead o... by ulrikrasmussen on Saturday December 18, 2021 @12:07AM (#29601848)

I password protect my key for the sole threat model of me physically losing my device. I am aware that all other threat models that involve someone taking remote control of my device are not fully protected against, but it at least requires significantly more effort on their part versus just doing a scan for private keys on the file system.

[ Parent | on HN ]

Re:Passage: A fork of password-store that uses age instead o... by SEJeff on Saturday December 18, 2021 @12:36AM (#29601985)

Why not use disk encryption for this threat model?

[ Parent | on HN ]

Re:Passage: A fork of password-store that uses age instead o... by withinboredom on Saturday December 18, 2021 @12:56AM (#29602095)

> Why not use disk encryption for this threat model?

Most people don’t add a password to the disk encryption, meaning the keys can “easily” be extracted by MITM the contacts on the chip.

[ Parent | on HN ]