Disable sync for private keys?

[rlipscombe]

trafficstars

Kinda missing the point of the "private" in "private key" if the key is synchronised to all of my Chrome-using devices.

[iamhsa]

Enable/Disable sync. will be a very interesting option to have.

[ralimi]

Seems like a reasonable request.

Until that's implemented, note the following:

• If an encrypted private key is provided, only the encrypted form is synced.
• Unencrypted private keys are synced only if an unencrypted private key is provided in the first place.

[rlipscombe]

Another argument against syncing private keys: I tend to have one key per device, allowing me to revoke a specific key if, say, I leave my laptop in the pub.

Note that this only happened once; the laptop had full disk encryption; and it was closing time anyway, so the laptop was locked up in the pub until I collected it the following day anyway. :)

Still revoked that key, though.

[ralimi]

To do this, we'll need to migrate some of the data that we store in the browser to a slightly different format. I'm starting to add the plumbing to do that. One that starts, it will take a few releases and some time for that migration to take place safely.

At that point, this should be doable.