Skip to content

V3.3: Value extraction and basic trust controls
Compare
Choose a tag to compare
@Byron Byron released this 25 Mar 15:37
3.3.0
4f8d2c5

Improved UX and basic Web of Trust controls

Having spend some time reading up on the issue, and having realized that there is a reason
the 'Web of Trust' model as implemented by GPG/PGP are not particularly wide-spread for a reason,
for adoption, there should be a way to turn it off and delegate trust checking to external sources
(like keybase.io).

Also given the way the vault is typically used, we should disable it by default, and make enabling
it optional to more advanced teams.

  • Configure web-of-trust options on per-partition basis and use that when encrypting.
  • Option to auto-import keys when encrypting resources, which is enabled by default.
  • Don't fail when listing recipients whose keys are not in the keychain.

The extract subcommand

The extract capability makes it feasible to store secrets in structured files
like YAML or JSON, as it allows to extract pieces of data in various ways.
Think basic jq but with native support for YAML files.

Assets 4
Loading