[H-SASIG] Passwords and secret's

[Raymond Smith]

2009/12/21 Daniel Devine <devine at ddevnet.net>:
> I feel funny about just throwing all of that stuff on the internet. How
> about 2 or more flash keys with the content encrypted using the GPG keys?

In the past we've had similar information in clear text on caliburn.
Of course, that was before we had backups freely downloadable from the
Internet. We could mitigate against this by simply not including the
file in the regular backups and having some other backup mechanism in
place (eg copies to hydra every meeting).

USB keys suffer from three problems in my view. First, they need to be
kept synchonised. Second, the information may not be available when
needed (eg I am most likely to want the list admin passwords when I am
online). Third, they are easily misplaced or stolen.

Cheers,

Raymond