age seems to be the new hot thing to encrypt data.
However, when you generate a key pair, the private key just sits as a plaintext file on your computer.
Maybe I'm too used to PGP, but this makes me a bit nervous. There doesn't see to be a key manager that allows you to pass in a key id with which you encrypt / decrypt. It's all done using the public key directly in the command line (for encrypting), or the plaintext private key file (to decrypt).
Am I missing something? Is there a better / easier way to manage these private key files?
13 Comments
taladar@sh.itjust.works · 11 pts · 3y
What a stupid name for a tool. Are they deliberately trying to make it unrecognizable when people read the word?
StudioLE@programming.dev · 10 pts · 3y
I can't be the only one to think GIF is a terrible example for pronunciation?
MaxVoltage@lemmy.world · 3 pts · 3y
pgp is already perfect lol thats too mucu
authed@lemmy.ml · 3 pts · 3y
The pgp private key sitting on your computer is also plain text... Unless you encrypt it
Cipher22@lemmy.world · 1 pts · 3y
Right? Op is trying to personify "we've tried nothing and we're all or if ideas". It's almost like it's a beast practice to encrypt data at rest, including your pain text keys.
mim@lemmy.sdf.org · 1 pts · 3y
Have you actually used age?
Unlike gpg, encryption of the private key is not default (or straightforward). It also doesn't have a key management system
birdcat@lemmy.ml · 1 pts · 3y
Not sure I get it. How do you create keys? I use kleopatra and never saw a plaintext.
mim@lemmy.sdf.org · 1 pts · 3y
https://github.com/FiloSottile/age
mojo@lemm.ee · 1 pts · 3y
you can move it to your keystore in /etc/pki
manitcor@lemmy.intai.tech · -2 pts · 3y