| 1 Jul 2025 |
 K900 | sops/age are the wrong tool for this | 15:24:59 |
| K900 | Entirely | 15:25:00 |
| K900 | And keepassxc has an SSH agent | 15:25:08 |
| K900 | So just keep using that | 15:25:10 |
 zororg | Then only use of them are in deployment? | 15:25:17 |
| K900 | Yes | 15:25:25 |
| zororg | ah, thats the conclusion I came to as well.
Simply use gnupg and keepass, right? | 15:26:11 |
| K900 | No gnupg | 15:26:25 |
| K900 | Just use keepass | 15:26:27 |
| zororg | then file encryption, git signing? | 15:26:50 |
| K900 | SSH signatures for git if you really want to | 15:27:25 |
| K900 | Though it's fine to just not | 15:27:28 |
| K900 | age for encrypting files if you really need something public key based | 15:27:41 |
| K900 | But honestly that's not a thing you generally want | 15:27:52 |
| zororg | sounds sensible. | 15:28:11 |
| zororg | wait.. why not?
you mean not age? | 15:28:23 |
| K900 | I mean GPG-style public key multiple recipients kind of file encryption | 15:28:41 |
| K900 | Is just not a thing you actually often use] | 15:28:46 |
| K900 | * Is just not a thing you actually often use | 15:28:47 |
| K900 | As an end user | 15:28:49 |
| K900 | Outside of, like, deployment use cases | 15:28:56 |
| zororg | so simply symmetric encryption? | 15:29:10 |
| K900 | For what purpose? | 15:29:31 |
| K900 | Like, what's your use case for this even | 15:29:38 |
| K900 | And what is your threat model | 15:29:41 |
| K900 | And why | 15:29:45 |
| zororg | file encryption via age | 15:29:48 |
| K900 | That's not a use case | 15:29:58 |
| K900 | Why do you want to encrypt files | 15:30:02 |
| zororg | no threat model. Just privacy concerned | 15:30:06 |
