<!DOCTYPE html>
<html>
<head>
<title></title>
</head>
<body><div>Gee, I wish I'd been paying more attention to the list if I could have contributed earlier.<br></div>
<div><br></div>
<div>I worked on totp-cli a long while ago which does basically the same -- but doesn't require users to craft an URI (just the key is enough):<br></div>
<div><br></div>
<div><a href="https://github.com/hobarrera/totp-cli" class="">https://github.com/hobarrera/totp-cli</a><br></div>
<div><br></div>
<div>TBH, I don't see the point of using an URI instead of the key (most website merely provide the latter).</div>
<div><br></div>
<div>Maybe we can join efforts and get rid of split work being done? I've no strong feelings about getting rid of totp in favour of a single project.<br></div>
<div><br></div>
<div><br></div>
<div>On Mon, Mar 20, 2017, at 18:31, Tad wrote:<br></div>
<div>> Hello pass users,<br></div>
<div>><br></div>
<div>> I've released version 1.0.0 of the pass-otp extension. Here's a summary<br></div>
<div>> of<br></div>
<div>> changes:<br></div>
<div>><br></div>
<div>> * New: `insert` command accepts `otpauth://` URIs directly.<br></div>
<div>> * New: `append` command appends or replaces OTP URIs in existing<br></div>
<div>> passfiles.<br></div>
<div>> * New: `validate` command validates an `otpauth://` URI against the<br></div>
<div>> Key Uri Format standard.<br></div>
<div>> * Rename `show` to `code` for disambiguation from `pass show`. `show` is<br></div>
<div>> still<br></div>
<div>> supported as an alias.<br></div>
<div>><br></div>
<div>> * **Drop `insert totp` and `insert hotp` commands.** These were<br></div>
<div>> cumbersome to<br></div>
<div>> support and are obviated by key URIs.<br></div>
<div>><br></div>
<div>> * **Drop support for the 0.1.0 OTP passfile format.** Please see the<br></div>
<div>> "Migrating from pass-otp 0.1.0" section of the README for advice on<br></div>
<div>> migrating<br></div>
<div>> your OTP passfiles from the previous version.<br></div>
<div>><br></div>
<div>> * **Drop support for entering OTP secrets as arguments.** This practice<br></div>
<div>> is<br></div>
<div>> prone to history leakage, which is (probably) why it is not supported<br></div>
<div>> by<br></div>
<div>> `pass insert`. Intrepid users may use `echo <uri> | pass otp insert`,<br></div>
<div>> but<br></div>
<div>> they should be warned to disable their shell's history feature.<br></div>
<div>><br></div>
<div>> I apologize for changing the file format, but it is ultimately for the<br></div>
<div>> best, as<br></div>
<div>> pass-otp is now fundamentally compatible with all third-party OTP<br></div>
<div>> authenticators<br></div>
<div>> which use standard OTP key URIs. I'm available to assist with any<br></div>
<div>> migration<br></div>
<div>> issues; simply reply to this mail or post an issue on github.<br></div>
<div>><br></div>
<div>> You may download pass-otp from Github:<br></div>
<div>><br></div>
<div>> https://github.com/tadfisher/pass-otp<br></div>
<div>><br></div>
<div>> Happy passing!<br></div>
<div>> Tad Fisher<br></div>
<div>> _______________________________________________<br></div>
<div>> Password-Store mailing list<br></div>
<div>> Password-Store@lists.zx2c4.com<br></div>
<div>> https://lists.zx2c4.com/mailman/listinfo/password-store<br></div>
<div><br></div>
<div><br></div>
<div id="sig33494697"><div class="signature">--<br></div>
<div class="signature">Hugo Osvaldo Barrera<br></div>
</div>
<div><br></div>
</body>
</html>