Password Mapping
Alexandre Pujol
alexandre at pujol.io
Sun Feb 12 22:29:45 CET 2017
Have a look at the following threads in the ML:
[1] pass tomb: That put the whole password store in a LUKS dm-crypt
block storage. This is a better solution that the one you propose
because tomb like pass is a well known software using state of the art
strong cryptography (Full disclosure: I'm the author of pass tomb).
[2] This month discussion: It is what you call a password mapping,
although the solution proposed in the discussion is not the same.
[3] Last year thread on the same subject.
[1]
https://lists.zx2c4.com/pipermail/password-store/2017-February/002716.html
[2]
https://lists.zx2c4.com/pipermail/password-store/2017-February/002700.html
[3]
https://lists.zx2c4.com/pipermail/password-store/2016-January/001880.html
On 12/02/17 21:16, Johannes Marbach wrote:
> we really need some kind of FAQ on this - this question is asked about
> once a month.
>
>
> Sorry for opening this can of worms again. I had searched
> lists.zx2c4.com <http://lists.zx2c4.com> for things like "map" and
> "mappings" but didn't find any related threads. :(
>
> The fact that this is asked repeatedly maybe shows that it's not as
> clear to everyone so maybe it's worth mentioning this on
> passwordstore.org <http://passwordstore.org>.
>
> now let's take a look at your threat model. There are three cases:
> 1) someone has access to your git and can see your folder structure.
> 2) someone has access to your harddisk
> 3) someone has access to your system while it is on and can read your
> home directory
>
>
> 2) and 3) were actually not my concern (due to the reasons given in your
> response and last week's thread). I was actually worried about 1) though
> since backing up and syncing passwords through a remote repository would
> be part of my workflow. That being said, it looks like git-remote-gcrypt
> is a viable way around this. Thanks, I wasn't aware this existed! :)
>
>
> _______________________________________________
> Password-Store mailing list
> Password-Store at lists.zx2c4.com
> https://lists.zx2c4.com/mailman/listinfo/password-store
>
More information about the Password-Store
mailing list