- cross-posted to:
- foss
- privacyguides@lemmy.one
You must log in or register to comment.
This is such a non story
You come to expect better but then you can only roll your eyes and face-palm when even “the best” do something this stupid.
To be fair it’s on your own device, not the server.
Doesn’t… doesn’t then OpenSSH client store keys in text files?
I’m trying to figure out how this is an issue, other than maybe Signal should be using an OS level keystore.
They are text files but they are not “plaintext”. They are (optionally) encrypted with a user-supplied password. That is why you need
ssh-agentto stay sane.