Skip to content

Encrypted filestore #57

@Benehiko

Description

@Benehiko

A fallback store should be self-contained, easy to use and secure. The current credential helper fails at providing a self-contained store, it relies on pass which relies on gpg and is only Linux based. Credentials should always be encrypted and shouldn't require any setup or init run to get started. Users should also not need any additional tools to use it.

A library that could fit this scenario is age. It is a well-known library for file encryption and can be extended to support more niche cases if we need to (e.g. support Yubikeys).

Sub-issues

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions