On Tuesday, May 9, 2017 at 12:47:11 AM UTC-4, cooloutac wrote:
> On Sunday, May 7, 2017 at 12:33:54 PM UTC-4, nick...@kulinacs.com wrote:
> > On May 7, 2017 10:39:22 AM CDT, Andrew David Wong <a...@qubes-os.org> wrote:
> > >-----BEGIN PGP SIGNED MESSAGE-----
> > >Hash: SHA512
> > >
> > >On 2017-05-07 10:32, nickl...@kulinacs.com wrote:
> > >> On May 7, 2017 10:23:54 AM CDT, Andrew David Wong 
> > >> <a...@qubes-os.org> wrote: On 2017-05-07 10:10, 
> > >> nickl...@kulinacs.com wrote:
> > >>>>> What benefit does this have over simply ysing 
> > >>>>> qubes-split-gpg-client-wrapper, like done here: 
> > >>>>> https://github.com/kulinacs/pass-qubes It seems like a lot
> > >>>>> of overhead for not a lot of gain.
> > >>>>> 
> > >>>>> On May 7, 2017 9:50:26 AM CDT, "Manuel Amador (Rudd-O)" 
> > >>>>> <rud...@rudd-o.com> wrote:
> > >>>>>> Building on the excellent pass (https://passwordstore.org),
> > >>>>>> it gives me great pleasure to announce the initial release
> > >>>>>> of qubes-pass — an inter-VM password manager and store for
> > >>>>>> Qubes OS.
> > >>>>>> 
> > >>>>>> Check it out here!
> > >>>>>> 
> > >>>>>> https://github.com/Rudd-O/qubes-pass
> > >>>>>> 
> > >> 
> > >> What are the advantages of either of these over the traditional 
> > >> Qubes model of having a normal password manager in a vault VM and 
> > >> using the inter-VM clipboard to copy/paste passwords out of it?
> > >> 
> > >> 
> > >> I prefer Pass because it uses GPG for encryption, meaning I can 
> > >> manage fewer secrets over all (as it backends into my normal GPG 
> > >> key) and then track my password files in git. To do this with the 
> > >> traditional Keepass method, you either need to back up the password
> > >> database somewhere secure or remember another password for it.
> > >> 
> > >
> > >Why not just back up the entire vault with qvm-backup?
> > >
> > >- -- 
> > >Andrew David Wong (Axon)
> > >Community Manager, Qubes OS
> > >https://www.qubes-os.org
> > >-----BEGIN PGP SIGNATURE-----
> > >
> > >iQIcBAEBCgAGBQJZDz+kAAoJENtN07w5UDAwVdEQAKyEUNffYrCLsTK8TyRvWnyi
> > >3dz15oDFHAL/PXkUHptcn4NJfU3BrmPBcf8DaBM2ROlXVJQayYZq9QwE1wlftxjr
> > >+ZblvNOuYbc/+FGxGNpqimc7jSC5TSaaduMW47THp66xemYH55pVChD2WT3X/dk4
> > >gn51SLYKE7tixnsOaqNEQSawpwbDsVaL4hLDgV4NLDKeZTbhLLxLbFlvikoMsUxY
> > >BXj19mfje2oJrDAXEDUtDK9qq8tOjttK4EomVG0HQVinyhpKiLn/Nil91xQnKvES
> > >H8QG9sEUUEGs0/GsYsXIkb3VJqRdkns5A1Cp5FR3/WTiIxBARfewXY3klQKO0UFj
> > >zTovVZ3OgjuqmqDlkLLGRI5bn1NHZ2k9IFly4+8VUYXPOVBNdkKmIpqS3x0EPhuO
> > >rFZmg/1OYHeT3FLt6WwDJilNGzN2I/FByx7AbwiEHGgspQYVviDRha2n6eCDGh0R
> > >uIZ3/8iYj+QA+glXZFGj5ghIKjBiA6rcn7vTh7/r+9rGaOCCDCGY6L4ZrgL8Ao76
> > >VOw1MnnzVHIOGjGQ0RacDN9qZ8D/YTy2BqZVUdF1RXoBb77LQgAfVfVAeIjzuWg7
> > >KIlXI9ScIFqEbbcxC7w4SC1LHbEcET81q5B0tNzJUJ+QL0/CZQ9avrPHBOq9kVRs
> > >NK8zRvknFnPargpog2UK
> > >=vzjL
> > >-----END PGP SIGNATURE-----
> > 
> > Git has less storage overhead (as you're backing up a bunch of text files, 
> > not an entire VM), allows proper versioning, so it is trivial to see your 
> > passwords at a point in time, and can be used cross platform if you chose 
> > to keep your GPG key on another system.
> 
> I just back up the database file. its encrypted.

I don't think backing up the whole vault is a good idea if you don't have to.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/dc2b9af1-1599-48ca-91e5-969627f9ca15%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to