coates’s avatarcoates’s Twitter Archive—№ 23,470

  1. …in reply to @grhmc
    grhmc Yep; I was thinking something like that too. My true hope was someone would point me at AWS Partial Secrets Manager or something. (-; I’m concerned about the same pitfalls you mentioned (this is not my expertise, but I am expert enough to know to not invent crypto (-: )
    1. …in reply to @coates
      grhmc FWIW (and IIRC) Keybase uses private keys to generate private keys so that the subkeys can be regenerated without having to invalidate the main key. They also use this for re-keying chats when new team members join, etc. It’s all a bit too There Be Dragons for my comfort level.