Here's something I wrote in a message to this list earlier that's relevant:
I'm using git-remote-gcrypt <https://github.com/spwhitton/git-remote-gcrypt> > with a simple bare remote repo in Dropbox. Because the entire remote repo > (e.g. including the Git internal objects) are encrypted, neither the file > paths nor the Git history should be readable via the remote repo in Dropbox. > The *git-remote-gcrypt *helper encrypts an entire Git repo (and not just Pass repos) – including the Git metadata (e.g. history). So filenames, directory names, etc. are entirely obfuscated. Instead of sharing a single GPG key-pair I just use a separate key-pair for every computer from which I want to access the repo and I encrypt all of the Pass files with a GPG group consisting of all of the (public) keys for all of my computers. On Wed, Oct 18, 2017 at 11:14 PM, <[email protected]> wrote: > [Keybase](keybase.io) recently released an encrypted GIT repository > service as part of its app. It's still pretty early days though. So no easy > way to pull down to your phone. Works perfectly for all your PCs though. > Completely platform agnostic. > > > 15. Oct 2017 21:35 by [email protected]: > > > On 17/10/16 13:35, Alec Clews wrote: > > You can clone (plus push and pull) to a remote repository using https as > the transport instead of using ssh. > > It seems to me that hosting on git cloud server may be a brave choice? I'd > be interested to know what other people think. > > > I don't see any problem with that, as long as his private gpg-key is not > also up there in the cloud and he is using a reasonably secure key. And > keeps his key save. But that's the SPOF of pass anyway. > The only problem I see might be privacy implications since other people > can publicly see what for sites he is using, if he names his passwords > accordingly. Maybe the user should invest in a github subscription to be > able to create a private repository. > > Niels > _______________________________________________ > Password-Store mailing list > [email protected] > https://lists.zx2c4.com/mailman/listinfo/password-store > > > _______________________________________________ > Password-Store mailing list > [email protected] > https://lists.zx2c4.com/mailman/listinfo/password-store > >
_______________________________________________ Password-Store mailing list [email protected] https://lists.zx2c4.com/mailman/listinfo/password-store
