logoalt Hacker News

GeekyBeartoday at 5:36 PM4 repliesview on HN

> As a general principle, as a user, I expect a file on one computer to be usable on another computer.

As a general rule, I expect a file on an encrypted disk to be unreadable for anyone who lacks the encryption key(s).

> if I need to obtain some other thing from the original computer to "unlock" that file, I should be able to do it.

You can export your passwords to a plain text CSV from the original computer.


Replies

shaky-carrouseltoday at 5:42 PM

As a general rule, I expect a file on an encrypted disk to be encrypted with a key derived from a password I provide.

show 1 reply
frizlabtoday at 9:24 PM

> You can export your passwords to a plain text CSV from the original computer.

Exporting a private key from a keychain is hard to automate (the password of the keychain is asked for all exports, and HAS to be typed manually IIRC).

ftchdtoday at 5:43 PM

As a general rule, if I'm the user of both disks I expect to have the encryption key(s).

josephcsibletoday at 6:01 PM

The right way to do that is FDE, where you can't even mount the filesystem to see the files without having the decryption key.