On May 7, 2017 10:39:22 AM CDT, Andrew David Wong <a...@qubes-os.org> wrote: >-----BEGIN PGP SIGNED MESSAGE----- >Hash: SHA512 > >On 2017-05-07 10:32, nickl...@kulinacs.com wrote: >> On May 7, 2017 10:23:54 AM CDT, Andrew David Wong >> <a...@qubes-os.org> wrote: On 2017-05-07 10:10, >> nickl...@kulinacs.com wrote: >>>>> What benefit does this have over simply ysing >>>>> qubes-split-gpg-client-wrapper, like done here: >>>>> https://github.com/kulinacs/pass-qubes It seems like a lot >>>>> of overhead for not a lot of gain. >>>>> >>>>> On May 7, 2017 9:50:26 AM CDT, "Manuel Amador (Rudd-O)" >>>>> <rud...@rudd-o.com> wrote: >>>>>> Building on the excellent pass (https://passwordstore.org), >>>>>> it gives me great pleasure to announce the initial release >>>>>> of qubes-pass — an inter-VM password manager and store for >>>>>> Qubes OS. >>>>>> >>>>>> Check it out here! >>>>>> >>>>>> https://github.com/Rudd-O/qubes-pass >>>>>> >> >> What are the advantages of either of these over the traditional >> Qubes model of having a normal password manager in a vault VM and >> using the inter-VM clipboard to copy/paste passwords out of it? >> >> >> I prefer Pass because it uses GPG for encryption, meaning I can >> manage fewer secrets over all (as it backends into my normal GPG >> key) and then track my password files in git. To do this with the >> traditional Keepass method, you either need to back up the password >> database somewhere secure or remember another password for it. >> > >Why not just back up the entire vault with qvm-backup? > >- -- >Andrew David Wong (Axon) >Community Manager, Qubes OS >https://www.qubes-os.org >-----BEGIN PGP SIGNATURE----- > >iQIcBAEBCgAGBQJZDz+kAAoJENtN07w5UDAwVdEQAKyEUNffYrCLsTK8TyRvWnyi >3dz15oDFHAL/PXkUHptcn4NJfU3BrmPBcf8DaBM2ROlXVJQayYZq9QwE1wlftxjr >+ZblvNOuYbc/+FGxGNpqimc7jSC5TSaaduMW47THp66xemYH55pVChD2WT3X/dk4 >gn51SLYKE7tixnsOaqNEQSawpwbDsVaL4hLDgV4NLDKeZTbhLLxLbFlvikoMsUxY >BXj19mfje2oJrDAXEDUtDK9qq8tOjttK4EomVG0HQVinyhpKiLn/Nil91xQnKvES >H8QG9sEUUEGs0/GsYsXIkb3VJqRdkns5A1Cp5FR3/WTiIxBARfewXY3klQKO0UFj >zTovVZ3OgjuqmqDlkLLGRI5bn1NHZ2k9IFly4+8VUYXPOVBNdkKmIpqS3x0EPhuO >rFZmg/1OYHeT3FLt6WwDJilNGzN2I/FByx7AbwiEHGgspQYVviDRha2n6eCDGh0R >uIZ3/8iYj+QA+glXZFGj5ghIKjBiA6rcn7vTh7/r+9rGaOCCDCGY6L4ZrgL8Ao76 >VOw1MnnzVHIOGjGQ0RacDN9qZ8D/YTy2BqZVUdF1RXoBb77LQgAfVfVAeIjzuWg7 >KIlXI9ScIFqEbbcxC7w4SC1LHbEcET81q5B0tNzJUJ+QL0/CZQ9avrPHBOq9kVRs >NK8zRvknFnPargpog2UK >=vzjL >-----END PGP SIGNATURE-----
Git has less storage overhead (as you're backing up a bunch of text files, not an entire VM), allows proper versioning, so it is trivial to see your passwords at a point in time, and can be used cross platform if you chose to keep your GPG key on another system. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/B06DAF03-3208-4AB4-A0CF-96274F6A4804%40kulinacs.com. For more options, visit https://groups.google.com/d/optout.
