Comment on Show HN: Keeper – embedded secret store for Go (help me break it)Comments−n0n5moGenuine question: what's your thread model?Vault gives time limited Tokens with Network Boundary. Instead of Keeper, i would just use age:# writeecho "my secret" | age -r <recipient-pubkey> > secret.age# readage -d -i key.txt secret.age−sneak5mohttps://git.eeqj.de/sneak/secretThis is an age+filesystem secrets manager that I made that is basically what you wrote, but with more organization.−babawereOP5monot when you need an audit system−n0n5moTrue, but AFAIK an audit system is worthless if it resides on the same potentially compromised machine, no?
Comments
Genuine question: what's your thread model?
Vault gives time limited Tokens with Network Boundary. Instead of Keeper, i would just use age:
# write
echo "my secret" | age -r <recipient-pubkey> > secret.age
# read
age -d -i key.txt secret.age
https://git.eeqj.de/sneak/secret
This is an age+filesystem secrets manager that I made that is basically what you wrote, but with more organization.
not when you need an audit system
True, but AFAIK an audit system is worthless if it resides on the same potentially compromised machine, no?