<div>Thanks for your suggestion. I am considering to use keychian to store credentials. User defaults indeed are not proper places. I plan to focus on these concerns seriously in the following weeks. Currently, the app is in a very early stage ( or you can call it "proof of concept/prototype". Thanks for your interests.</div><div><br><div class="gmail_quote"><div>On Sun, 19 Feb 2017 at 3:12 PM, Johannes Marbach <<a href="mailto:johannesmarbach@gmail.com">johannesmarbach@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="gmail_msg">One more comment I have after skimming through the source: I'm pretty sure the user defaults are not a suitable place for storing git credentials or key pass phrases. Those should probably rather go into the key chain instead (which AFAIK was made exactly for storing these things). I also wonder if the key pass phrase should be persisted in the app at all.<br class="gmail_msg"></div><div class="gmail_extra gmail_msg"><br class="gmail_msg"><div class="gmail_quote gmail_msg">On Sun, Feb 19, 2017 at 7:45 AM, Johannes Marbach <span class="gmail_msg"><<a href="mailto:johannesmarbach@gmail.com" class="gmail_msg" target="_blank">johannesmarbach@gmail.com</a>></span> wrote:<br class="gmail_msg"><blockquote class="gmail_quote gmail_msg" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="gmail_msg">Actually I just realised that the store could already be sycned over wifi with a local git server. For the key, maybe scanning from a QR code would be nice (see e.g. <a href="https://github.com/4bitfocus/asc-key-to-qr-code" class="gmail_msg" target="_blank">https://github.com/4bitfocus/asc-key-to-qr-code</a>). Otherwise I don't really see how to securely get my key into the app.<br class="gmail_msg"></div><div class="m_-6208325894578048503HOEnZb gmail_msg"><div class="m_-6208325894578048503h5 gmail_msg"><div class="gmail_extra gmail_msg"><br class="gmail_msg"><div class="gmail_quote gmail_msg">On Sat, Feb 18, 2017 at 8:43 PM, Johannes Marbach <span class="gmail_msg"><<a href="mailto:johannesmarbach@gmail.com" class="gmail_msg" target="_blank">johannesmarbach@gmail.com</a>></span> wrote:<br class="gmail_msg"><blockquote class="gmail_quote gmail_msg" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="gmail_msg">This looks really interesting. Would it be possible to add support for syncing both the key and the password store over wifi?<br class="gmail_msg"></div><div class="gmail_extra gmail_msg"><br class="gmail_msg"><div class="gmail_quote gmail_msg"><div class="gmail_msg"><div class="m_-6208325894578048503m_5441637128677205193h5 gmail_msg">On Fri, Feb 17, 2017 at 2:50 PM, Bob Sun <span class="gmail_msg"><<a href="mailto:bob@mssun.me" class="gmail_msg" target="_blank">bob@mssun.me</a>></span> wrote:<br class="gmail_msg"></div></div><blockquote class="gmail_quote gmail_msg" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="gmail_msg"><div class="m_-6208325894578048503m_5441637128677205193h5 gmail_msg"><div class="gmail_msg"><pre class="gmail_msg">-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hi all,
I'm writing an iOS client compatible with Pass command line tool
<a href="https://www.passwordstore.org" class="gmail_msg" target="_blank">https://www.passwordstore.org</a>. Pass for iOS is a password manager using GPG for
encryption and Git for version control. The app is written in Swift, and its
source code is released in GitHub <a href="https://github.com/mssun/pass-ios" class="gmail_msg" target="_blank">https://github.com/mssun/pass-ios</a> under MIT
license.
If you are interested in Pass for iOS, please register as an external TestFlight
user at <a href="https://pass-ios.herokuapp.com" class="gmail_msg" target="_blank">https://pass-ios.herokuapp.com</a>. Reply me for the registration password
(since this is the initial external test, I can only handle a small group of
people).
The detailed usage can be found at <a href="https://github.com/mssun/pass-ios/wiki" class="gmail_msg" target="_blank">https://github.com/mssun/pass-ios/wiki</a>. The
beta version still have many bugs and may crash. Please report issues on Github
page. Thank you.
Features
* Try to be compatible with Password Store command line tool
* Support to view, copy, add, edit password entries
* Encrypt and decrypt password entries by PGP keys
* Synchronise with you password Git repository
* User-friendly interface
* Written in Swift
* No need to jailbreak your devices
* Get from App Store (stay tuned, under review)
Usage
* Generate a PGP key pair
* Use the pass command line tool
* Push encrypted password store to a private Git repository
* Build Pass for iOS by yourself or download from App Store
* Start to use Pass for iOS on your iPhone/iPad
For more, please read the wiki page.
Best,
Bob
<a href="https://mssun.me" class="gmail_msg" target="_blank">https://mssun.me</a>
-----BEGIN PGP SIGNATURE-----
Version: Mailvelope v1.6.5
Comment: <a href="https://www.mailvelope.com" class="gmail_msg" target="_blank">https://www.mailvelope.com</a>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=CKPY
-----END PGP SIGNATURE-----
<pre class="gmail_msg"></pre></pre></div>
<br class="gmail_msg"></div></div>_______________________________________________<br class="gmail_msg">
Password-Store mailing list<br class="gmail_msg">
<a href="mailto:Password-Store@lists.zx2c4.com" class="gmail_msg" target="_blank">Password-Store@lists.zx2c4.com</a><br class="gmail_msg">
<a href="https://lists.zx2c4.com/mailman/listinfo/password-store" rel="noreferrer" class="gmail_msg" target="_blank">https://lists.zx2c4.com/mailman/listinfo/password-store</a><br class="gmail_msg">
<br class="gmail_msg"></blockquote></div><br class="gmail_msg"></div>
</blockquote></div><br class="gmail_msg"></div>
</div></div></blockquote></div><br class="gmail_msg"></div>
</blockquote></div></div><div dir="ltr">-- <br></div><div data-smartmail="gmail_signature">Best,<br>Mingshen<br><a href="http://www.cse.cuhk.edu.hk/~mssun">www.cse.cuhk.edu.hk/~mssun</a></div>