Page MenuHomePhabricator

Storing secret file in paste
Closed, ResolvedPublic

Description

I wanted to use Passphrase to store a secret file (a configuration file containing secrets) such that only I could access it. It seems that Passphrase can only store SSH keys or username/password combinations. Instead, I created a Paste and set the view/edit policy to be my user only. Is this safe? Is there any benefit to using passphrase for this purpose?

Event Timeline

joshuaspence raised the priority of this task from to Needs Triage.
joshuaspence updated the task description. (Show Details)
joshuaspence added projects: Paste, Passphrase.
joshuaspence added a subscriber: joshuaspence.

I plan to add a "note" or "text" type to Passphrase to handle this, but there isn't a good approach now.

Using Paste will work fine, but it would be nicer to have everything in one place, offer client-side encryption eventually, etc.

Implement a new subclass of PassphraseCredentialType which works like PassphraseCredentialTypePassword but stores a large block of text (like a configuration file, or a secret will, or the eldritch words of command which must not fall on mortal ears). This could be called "Note" or "Block" or "Blob" or something similar.