Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

.ssh directory copied by default #336

Closed
lambdahands opened this issue Oct 3, 2014 · 5 comments
Closed

.ssh directory copied by default #336

lambdahands opened this issue Oct 3, 2014 · 5 comments

Comments

@lambdahands
Copy link

Loving this project so far, but I noticed my ~/.ssh directory including my id_rsa were copied by default to my Dropbox account. This is, well, uncomfortable. It may be best to disable backing up keys to a cloud service by default.

@cmsj
Copy link

cmsj commented Oct 3, 2014

+1

(although I would have gone further than "uncomfortable" )

I would suggest just listing:

~/.ssh/config
~/.ssh/known_hosts
~/.ssh/authorized_keye

@Geogi
Copy link

Geogi commented Oct 13, 2014

I'd like to weight on that. The GnuPG directory should not be copied either.

EDIT: now that I think about it, shipping a .mackup.cfg file disabling those packages, along with a note in the README saying they're supported but disabled by default is a much simpler option.

The best would be to have a "enabled" / "disabled" flag on configuration files and an action for the cli to switch between the two. Sensitive applications would be disabled by default but users that want them (e.g. local backups) could enable them easily.

If it's not worth the effort, I would suggest to simply remove SSH and GnuPG (and anything else that's sensitive) from the list of supported apps. This is not a sane default.

The tool is great though :-)

@dekz
Copy link

dekz commented Dec 17, 2014

On the contrary, my private keys use passphrase. Having the sync on default to me makes sense.

@llinder
Copy link

llinder commented Jan 8, 2015

Optionally encrypting files might be a good approach? This way storing these files in dropbox is less worrisome.

@lra
Copy link
Owner

lra commented Apr 15, 2015

Dupe of #109

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

6 participants