encrypted file and directory names?

HacKan Iván hackan at gmail.com
Sun Feb 5 04:53:31 CET 2017


I thought the same, but implementing it is a real pain in the ass.

I'm currently working on something I'll send soon, and then I'm gonna work on an extension to do just that :)

Cheers!

On February 4, 2017 2:50:46 PM GMT-03:00, Adam Spiers <pass at adamspiers.org> wrote:
>Hi all,
>
>I was delighted to discover this project recently.  It seems to be
>almost exactly the perfect solution needed to avoid the unpleasant
>situation of being reliant on a proprietary password manager.
>
>There is one feature which I consider pretty essential, and as far as
>I can see, it's not supported by pass yet, which is to keep the entire
>metadata encrypted, including the directory names and file names.
>Without this it doesn't seem to provide 100% privacy protection, since
>for example it potentially exposes which websites you use.  Is that
>right, or am I missing something?
>
>If I'm right, would this be an easy thing to solve architecturally?
>For example, the directory names and file names could be converted
>into some kind of digest (e.g. SHA-256), and then a mapping between
>digests and the original names could be tracked in a separate
>encrypted file at the top level of the store.
>
>Thanks!
>Adam
>_______________________________________________
>Password-Store mailing list
>Password-Store at lists.zx2c4.com
>https://lists.zx2c4.com/mailman/listinfo/password-store

-- 
HacKan || Iván
GPG: 0x35710D312FDE468B
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.zx2c4.com/pipermail/password-store/attachments/20170205/83a4654c/attachment.html>


More information about the Password-Store mailing list