| 1 Jul 2025 |
 zororg | yubikey is out of option for me. | 15:23:55 |
 K900 | Why? | 15:24:07 |
| zororg | I use keepassxc. Although my questions would, can sops+age replace gpg and keepass for me? | 15:24:27 |
| zororg | expensive, and I dont real usage with it for now. | 15:24:40 |
| K900 | No | 15:24:53 |
| zororg | * expensive, and I dont real usage with it for now. Maybe when I have too many setups and machines (one day...) | 15:24:54 |
| K900 | sops/age are the wrong tool for this | 15:24:59 |
| K900 | Entirely | 15:25:00 |
| K900 | And keepassxc has an SSH agent | 15:25:08 |
| K900 | So just keep using that | 15:25:10 |
| zororg | Then only use of them are in deployment? | 15:25:17 |
| K900 | Yes | 15:25:25 |
| zororg | ah, thats the conclusion I came to as well.
Simply use gnupg and keepass, right? | 15:26:11 |
| K900 | No gnupg | 15:26:25 |
| K900 | Just use keepass | 15:26:27 |
| zororg | then file encryption, git signing? | 15:26:50 |
| K900 | SSH signatures for git if you really want to | 15:27:25 |
| K900 | Though it's fine to just not | 15:27:28 |
| K900 | age for encrypting files if you really need something public key based | 15:27:41 |
| K900 | But honestly that's not a thing you generally want | 15:27:52 |
| zororg | sounds sensible. | 15:28:11 |
| zororg | wait.. why not?
you mean not age? | 15:28:23 |
| K900 | I mean GPG-style public key multiple recipients kind of file encryption | 15:28:41 |
| K900 | Is just not a thing you actually often use] | 15:28:46 |
| K900 | * Is just not a thing you actually often use | 15:28:47 |
| K900 | As an end user | 15:28:49 |
| K900 | Outside of, like, deployment use cases | 15:28:56 |
| zororg | so simply symmetric encryption? | 15:29:10 |
| K900 | For what purpose? | 15:29:31 |
| K900 | Like, what's your use case for this even | 15:29:38 |
