bulwarkid
Using native secret storage
I noticed in your readme that you plan to support storing secrets in an encrypted file. You should consider delegating that to secret storage mechanisms of the operating system (e.g. gnome-keyring or kwallet). Will mean less work for you, and less security bugs :smile:
https://specifications.freedesktop.org/secret-service/latest/
But this software supports windows (and mac in future).
Dbus and freedesktop don't want to port on windows, or at least to provide binaries.
Good point. But there is a windows equivalent: https://github.com/danieljoos/wincred
This is definitely a potential feature down the line, though right now I am prioritizing getting basic Mac support up and running. I do see the value in hardened credential storage on each platform, though I also want to allow people to be able to export/transfer credentials even in that case.
That makes perfect sense :slightly_smiling_face: Of course, I haven't done any MacOS development, but I assumed it would take drastically less code/time to use keychain than to write the storage mechanism yourself. :shrug: https://github.com/keybase/go-keychain
To me the most important aspect of this project is, that it can address the drawback of not being able to back up your keys. Depending upon the "native store" chosen you might again loose this option.
