privacy

3181 readers

226 users here now

Big tech and governments are monitoring and recording your eating activities. c/Privacy provides tips and tricks to protect your privacy against global surveillance.

Partners:

community.nicfab.it/c/privacy

founded 2 years ago

MODERATORS

Kokomheart

[email protected]

Signal under fire for storing encryption keys in plaintext (stackdiary.com)

submitted 6 months ago by [email protected] to c/privacy

16 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] psvrh 4 points 6 months ago (1 children)

Doesn't... doesn't then OpenSSH client store keys in text files?

I'm trying to figure out how this is an issue, other than maybe Signal should be using an OS level keystore.

[–] jerkface 1 points 6 months ago

They are text files but they are not "plaintext". They are (optionally) encrypted with a user-supplied password. That is why you need ssh-agent to stay sane.