From dbb207890d2dbaa76d4423703a672b6e134e1839 Mon Sep 17 00:00:00 2001 From: Joey Hess Date: Wed, 20 Aug 2025 14:16:29 -0400 Subject: [PATCH] comment --- ..._dc9c94892b4f8a7d072e6dc036adc05a._comment | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 doc/todo/encrypt_only_the_credentials/comment_5_dc9c94892b4f8a7d072e6dc036adc05a._comment diff --git a/doc/todo/encrypt_only_the_credentials/comment_5_dc9c94892b4f8a7d072e6dc036adc05a._comment b/doc/todo/encrypt_only_the_credentials/comment_5_dc9c94892b4f8a7d072e6dc036adc05a._comment new file mode 100644 index 0000000000..a86867f989 --- /dev/null +++ b/doc/todo/encrypt_only_the_credentials/comment_5_dc9c94892b4f8a7d072e6dc036adc05a._comment @@ -0,0 +1,19 @@ +[[!comment format=mdwn + username="joey" + subject="""comment 5""" + date="2025-08-20T17:44:07Z" + content=""" +I think I was assuming that encryption=onlycreds would use the same scheme as +encryption=hybrid, so new gpg keys can later be given access to the creds. + +It might be possible that someone would want the equivilant of +encryption=pubkey instead. (encryption=sharedpubkey is the same as +encryption=pubkey as far as encryption of creds goes). + +In future there might be some other, better encryption scheme that might be +desirable to use only for creds. Eg, something other than gpg.. + +An alternative to support such would be to use: + + encryption= embedcreds=yes onlyencryptcreds=yes +"""]]