freeatlantis.com is one of the many independent Mastodon servers you can use to participate in the fediverse.

Administered by:

Server stats:

197
active users

#smartcard

0 posts0 participants0 posts today

During our work towards openpgp-card v0.5 (fosstodon.org/@hko/11252048626), we wondered how to deal with secrets in log files.

It's often good if secrets are redacted in logs: This avoids accidental publication of a user PIN (or decrypted payload) in bug reports.
On the other hand, it can be useful for a developer to have full and verbatim logs (including secrets) for debugging.

We started work on this, but would like to hear from you. What should we do?

FosstodonHeiko (@hko@fosstodon.org)I just released openpgp-card v0.5.0: https://crates.io/crates/openpgp-card/0.5.0 openpgp-card is a Rust client library for using #OpenPGP card hardware security devices. This version comes with a significantly adjusted API: The low-level API has been moved to the "ocard" module. At the top level of the crate, more convenient abstractions are now directly available (including PIN handling for cards in KDF mode). #HSM #RustLang #PGP #GnuPG #gpg #Rust