neodork / pgs-encryptor Goto Github PK

The ssh-agent caches the passphrase for the loaded private keys (on load). This is a vulnerability when loaded the key can be abused without a passphrase. However the ssh-agent configuration is workstation specific.

Provide a ssh-agent configuration with as little caching as possible.

After untarring the private key tar, it shall remain untarred while you type the private key passphrase. However all other keys are also visible to the system (unencrypted).

Not sure if I should use the default or GPG's agent yet. Will be looking into it.

Some functions are not explained in de readme.md

Cannot evaluate the missing dependencies on new workstation. The sh status command should be able to tell the user what dependencies they're missing.

When trying to unmount drive from MacOS

Cannot load multiple keys, for example 2, into the agent because the command clears all keys before it adds new ones. For now this is only achieved with sh load --all . Which is less then ideal. Need an option to disable to clear.

https://help.github.com/articles/signing-commits-with-gpg/