Have a look at the following threads in the ML: [1] pass tomb: That put the whole password store in a LUKS dm-crypt block storage. This is a better solution that the one you propose because tomb like pass is a well known software using state of the art strong cryptography (Full disclosure: I'm the author of pass tomb).
[2] This month discussion: It is what you call a password mapping, although the solution proposed in the discussion is not the same. [3] Last year thread on the same subject. [1] https://lists.zx2c4.com/pipermail/password-store/2017-February/002716.html [2] https://lists.zx2c4.com/pipermail/password-store/2017-February/002700.html [3] https://lists.zx2c4.com/pipermail/password-store/2016-January/001880.html On 12/02/17 21:16, Johannes Marbach wrote: > we really need some kind of FAQ on this - this question is asked about > once a month. > > > Sorry for opening this can of worms again. I had searched > lists.zx2c4.com <http://lists.zx2c4.com> for things like "map" and > "mappings" but didn't find any related threads. :( > > The fact that this is asked repeatedly maybe shows that it's not as > clear to everyone so maybe it's worth mentioning this on > passwordstore.org <http://passwordstore.org>. > > now let's take a look at your threat model. There are three cases: > 1) someone has access to your git and can see your folder structure. > 2) someone has access to your harddisk > 3) someone has access to your system while it is on and can read your > home directory > > > 2) and 3) were actually not my concern (due to the reasons given in your > response and last week's thread). I was actually worried about 1) though > since backing up and syncing passwords through a remote repository would > be part of my workflow. That being said, it looks like git-remote-gcrypt > is a viable way around this. Thanks, I wasn't aware this existed! :) > > > _______________________________________________ > Password-Store mailing list > [email protected] > https://lists.zx2c4.com/mailman/listinfo/password-store > _______________________________________________ Password-Store mailing list [email protected] https://lists.zx2c4.com/mailman/listinfo/password-store
