privacy

2839 readers

147 users here now

Big tech and governments are monitoring and recording your eating activities. c/Privacy provides tips and tricks to protect your privacy against global surveillance.

Partners:

community.nicfab.it/c/privacy

founded 2 years ago

MODERATORS

[email protected]

Signal under fire for storing encryption keys in plaintext (stackdiary.com)

submitted 1 month ago by [email protected] to c/[email protected]

16 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 4 points 1 month ago (1 children)

Doesn't... doesn't then OpenSSH client store keys in text files?

I'm trying to figure out how this is an issue, other than maybe Signal should be using an OS level keystore.

[–] [email protected] 1 points 1 month ago

They are text files but they are not "plaintext". They are (optionally) encrypted with a user-supplied password. That is why you need ssh-agent to stay sane.