Show HN: Send encrypted secrets from the command line
1–10 of 43 posts
Re: Show HN: Send encrypted secrets from the command line
#2Setup is nice ... just sent a message to the Squirrel. ;-)
Don't have much time now but just wanted to give this a quick +1, worth checking out.
Re: Show HN: Send encrypted secrets from the command line
#3How does this compare to keybase?
Re: Show HN: Send encrypted secrets from the command line
#4Do the messages automatically get wiped?
Typically you don't want to keep the keys in your message boxes in case they get hacked in the future.
For this reason I use something like read then burn[1,2] for passwords.
[1] https://readthenburn.fnkr.net/ [2] https://github.com/Tethik/burn-after-reading
Re: Show HN: Send encrypted secrets from the command line
#5How does this compare to keybase?
Also had the same question. :)
Re: Show HN: Send encrypted secrets from the command line
#6I made something similar, but the payload gets encrypted with the users ssh rsa key instead of pgp (that not many use):
./sshencdec.sh -p Re: Show HN: Send encrypted secrets from the command line
#7How does this compare to keybase?
I guess they are solving similar problem, but this is automatically sending the email to the recipient. Also the integration with GPG may be preferable to some people if they don't have an extensive community of Keybase peers.
Re: Show HN: Send encrypted secrets from the command line
#8Nicely done. One nitpick would be that initial peer key discovery looks a bit iffy. Do I understand correctly that fk fetches it from a key registry that is hosted by you?
Is a self-hosted version of the same possible?
Additionally, there should probably be
a) Some sort of "paranoid" mode whereby it would show me peer's key (in some form) so that I could, if really wanted, manually verify it.
b) An option to cache peer keys locally. I assume this is done already and that the local cache lookup is given a priority over the registry search. Correct?
Re: Show HN: Send encrypted secrets from the command line
#9> Fluidkeys automatically fetches keys based on the verified email address and encrypts the secret to the key.
Fetches from where? Public key servers?
Anybody can upload a key for you@your-company.com to a public key server.
Re: Show HN: Send encrypted secrets from the command line
#10> Fluidkeys automatically fetches keys based on the verified email address and encrypts the secret to the key. Fetches from where? Public key servers? Anybody can upload a key for you@your-company.com to a public key server.
> We use our own server to store public keys and transmit encrypted secrets.
> We chose not to use the public keyserver network until it supports deleting keys and cryptographic validation.
... as well as the fact that there's no email validation, yep!