On 12/02/2017 20:40, Johannes Marbach wrote:

I think this potentially increases the surface for an attacker. Even though the files are still securely encrypted, I wouldn't even want someone to know that I have e.g. a Visa credit card or a gmail account.

Otherwise known as "security through obscurity". This is not how pass works; if you need this, either do it at a different layer (e.g. encfs), or maybe a different tool is more appropriate.

I'd really like to hear people's thoughts on this.

It was already discussed in detail just over the last week. See thread starting at
https://lists.zx2c4.com/pipermail/password-store/2017-February/002700.html

_______________________________________________
Password-Store mailing list
[email protected]
https://lists.zx2c4.com/mailman/listinfo/password-store

Reply via email to