add encryption warning

This commit is contained in:
Joey Hess 2019-08-05 11:29:32 -04:00
parent ecf7f34c23
commit 3f450f0f4a
No known key found for this signature in database
GPG key ID: DB12DB0FF05F8F38
2 changed files with 21 additions and 9 deletions

View file

@ -41,11 +41,12 @@ store its SHA256 checksum in the git-annex branch.
## encryption notes
The encryption= parameter only makes git-annex encrypt data stored on the
remote. `git push` can also be used with the remote (it is a git repository
after all), and data pushed to it with git will *not* be encrypted.
The encryption= parameter only makes git-annex encrypt data it stores
on the remote. `git push` can also be used with the remote
(it is a git repository after all), and data pushed to it with
git will *not* be encrypted.
This makes using encryption=shared with a git-lfs special remote very
Using encryption=shared with a git-lfs special remote is especially
unlikely to be secure, because the encryption key is committed to the git
repository. It would only make sense if you never pushed it to the
remote, or trusted the remote's host to keep it secure.