Hacker News Reader

very true, and thank you for pointing this out. this is an intentional design decision - you can see me rationale here: https://j3s.sh/thought/storing-passwords-with-age.html

it boils down to exactly what you noted - disk access is game over in most cases anyways, and i like the convenience of plaintext on the disk.

i will be exploring the yubikey model that filippo recently outlined though https://words.filippo.io/dispatches/passage/ - so stay tuned! :D

View on HN

Thanks for sharing your rationale! I tend to agree -- the practical alternative for Linux anyways is some kind of key agent, and it's unclear to me (having written a few password managers at this point, including an age-based one[1]) that the attacker model for an agent is any different. The only advantage is the "public" channel one I mentioned, and that can of course be done out of band.

And since I forgot to say it earlier: excellent work!

[1]: https://github.com/woodruffw/kbs2

wow, extremely cool, ty! i'm excited to play with kbs2 when i find a little free time.

Reply on news.ycombinator.com