Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Git-remote-s3 – push and pull Git repos to/from s3, encrypted using GPG

github.com

Post reply on HN
Print view View original

11–18 of 18 posts

Re: Show HN: Git-remote-s3 – push and pull Git repos to/from s3, encrypted using GPG

#11

Post by verigit »

iknowstuff wrote: post #10
verigit wrote: post #6

Earlier quoted context omitted.

EasyGit data are encrypted by Apple. So it is on par with using KeyBase or GitHub. I give you that it is not the same as rolling your own crypto, but I was replying to a comment about KeyBase.

Wow, sir, you are presenting yourself as a little bit clueless. Keybase's whole shtick is thorough end-to-end encryption on all of their products. They're not "rolling their own crypto". They use established, proven cryptography to share keys between your devices without ever having access to your private keys themselves. Apple, on the other hand, can see everything you upload to iCloud Drive, iCloud Photos etc. Don'…

Sorry, I was referring to the S3+GPG solution. However as far as I know the Keybase client is closed source, so everything you say also applies to them.

Re: Show HN: Git-remote-s3 – push and pull Git repos to/from s3, encrypted using GPG

#12

Post by dfischer »

snagglegaggle wrote: post #9
maximente wrote: post #3

i have been using keybase's encrypted git repos and it has been great. highly recommended as a possible alternative to this. https://keybase.io/blog/encrypted-git-for-everyone

I have failed at understanding how to set this up. How do I use it while installing the bare minimum amount of keybase? Why is it necessary to use their website with keybase git? Can't I use the cryptography without their key exchange? I got a bad feeling trying to use the app last time.

All you have to do is install Keybase, then when you load the app you click "git" in the menunav and create a repository for yourself or a team. It's easy. :)

Re: Show HN: Git-remote-s3 – push and pull Git repos to/from s3, encrypted using GPG

#13

Post by snagglegaggle »

dfischer wrote: post #12
snagglegaggle wrote: post #9

Earlier quoted context omitted.

I have failed at understanding how to set this up. How do I use it while installing the bare minimum amount of keybase? Why is it necessary to use their website with keybase git? Can't I use the cryptography without their key exchange? I got a bad feeling trying to use the app last time.

All you have to do is install Keybase, then when you load the app you click "git" in the menunav and create a repository for yourself or a team. It's easy. :)

The trick is, apparently, doing it without sending anything to Keybase

Re: Show HN: Git-remote-s3 – push and pull Git repos to/from s3, encrypted using GPG

#14

Post by iknowstuff »

verigit wrote: post #11
iknowstuff wrote: post #10

Earlier quoted context omitted.

Wow, sir, you are presenting yourself as a little bit clueless. Keybase's whole shtick is thorough end-to-end encryption on all of their products. They're not "rolling their own crypto". They use established, proven cryptography to share keys between your devices without ever having access to your private keys themselves. Apple, on the other hand, can see everything you upload to iCloud Drive, iCloud Photos etc. Don'…

Sorry, I was referring to the S3+GPG solution. However as far as I know the Keybase client is closed source, so everything you say also applies to them.

The keybase client is open source: https://github.com/keybase/client

Re: Show HN: Git-remote-s3 – push and pull Git repos to/from s3, encrypted using GPG

#15

Post by dfischer »

snagglegaggle wrote: post #13
dfischer wrote: post #12

Earlier quoted context omitted.

All you have to do is install Keybase, then when you load the app you click "git" in the menunav and create a repository for yourself or a team. It's easy. :)

The trick is, apparently, doing it without sending anything to Keybase

I guess it’s somewhat possible if someone did the effort to Port their server code?

Re: Show HN: Git-remote-s3 – push and pull Git repos to/from s3, encrypted using GPG

#16

Post by calculuscrayon »

verigit wrote: post #11
iknowstuff wrote: post #10

Earlier quoted context omitted.

Wow, sir, you are presenting yourself as a little bit clueless. Keybase's whole shtick is thorough end-to-end encryption on all of their products. They're not "rolling their own crypto". They use established, proven cryptography to share keys between your devices without ever having access to your private keys themselves. Apple, on the other hand, can see everything you upload to iCloud Drive, iCloud Photos etc. Don'…

Sorry, I was referring to the S3+GPG solution. However as far as I know the Keybase client is closed source, so everything you say also applies to them.

GPG is designed to be used by end users. It's a bit cumbersome, but you don't have to implement any algorithms, which is what I assume is meant by 'rolling your own crypto'.

Re: Show HN: Git-remote-s3 – push and pull Git repos to/from s3, encrypted using GPG

#18

Post by MertsA »

iknowstuff wrote: post #10
verigit wrote: post #6

Earlier quoted context omitted.

EasyGit data are encrypted by Apple. So it is on par with using KeyBase or GitHub. I give you that it is not the same as rolling your own crypto, but I was replying to a comment about KeyBase.

Wow, sir, you are presenting yourself as a little bit clueless. Keybase's whole shtick is thorough end-to-end encryption on all of their products. They're not "rolling their own crypto". They use established, proven cryptography to share keys between your devices without ever having access to your private keys themselves. Apple, on the other hand, can see everything you upload to iCloud Drive, iCloud Photos etc. Don'…

That E2E encryption sure must be easy when you just handwave away key distribution. At least that's still not as bad as when FileVault discarded the user's password hint and instead used the plaintext password itself as the hint.
Post reply on HN