X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org B3296388A03A
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1586000488;
	bh=1mjEsrecpCyre8LPhkDlStaC/JDDPaBghGsvhLsyU9Q=;
	h=References:In-Reply-To:Date:Subject:To:List-Id:List-Unsubscribe:
	List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:
	From;
	b=vB+wcSz19mmD4O6GGDbP9BOPjV6KGxz4IjPLlDMPnQpW3NU37BuRBTuzEPROY7c/m
	DwdAFDGPWGzLK4bOVxxE1DFB0xk8S4ft7KADFfdDWeU39haHbFNf2BrcOEMu5JC2oy
	YkpRyBXjf6QyKw22ZLglhG+gMr8ad5ozONWol5JU=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.3.2 sourceware.org 672DA388A030
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=1e100.net; s=20161025;
	h=x-gm-message-state:mime-version:references:in-reply-to:from:date
	:message-id:subject:to;
	bh=lGotEkTeGRx3pN4sJzJxEM9JJxjk5A1x+J64/nBPvfM=;
	b=UvMxYJ48AmiA9eNhPnyWshiUbdmZXpyyiaeA6k7qZ2QLDQhZMr+KZr7AYATCVxEcFK
	FAolXnf7B2kHgNUcHk8owb3UGnmvNOu0wStkyr1fwrwZ35fG5yfF57BcgPygqOEQJPZV
	1x0YSeLK+TVvfvjY03UgFi+YdpNblWCYBiGAub67IgdUGxLNE8Qolwa7V3mMG94zX5SU
	SY3ngPXWARuLH5N0CxV+yCZb7Mb3VdyVFAqgQaj62C7fOfybUNDxUhFVRrpUeqp2tsqN
	N3002R0RbzglE86oIGgw2dw6ANZTofmzmejaikD94849SnUXB1fpdl9ceIjJRwgfATqe
	BDtA==
X-Gm-Message-State:	AGi0PuZZlFO91iHUjpXuLsBfYJ9o0SCWnovxWyfnwmnokPkBBtc+3IFf
	hjrEpWqezh8nkPNzTluJpQQBMUEZjmUOLQJN3injveJp
X-Google-Smtp-Source:	APiQypKp3qCFixMazv/9EwaromwRP8YwmQSAMuAG/E/wMriGza8ryfwSfGJ1aAh0Rx9pF/XjSUF3JV2JfLmbx4Q7Cng=
X-Received:	by 2002:a05:6808:207:: with SMTP id
	l7mr6586851oie.171.1586000485385;
	Sat, 04 Apr 2020 04:41:25 -0700 (PDT)
MIME-Version:	1.0
References:	<CA+7cx1pHS+=+h15rUZ5biSwKb=mxprMx7VadRRqm4Q4MYj+ewg AT mail DOT gmail DOT com>
In-Reply-To:	<CA+7cx1pHS+=+h15rUZ5biSwKb=mxprMx7VadRRqm4Q4MYj+ewg@mail.gmail.com>
Date:	Sat, 4 Apr 2020 13:41:12 +0200
Message-ID:	<CA+7cx1oXomuqvZLr1uNAbsdJ1M5M6cKgKsptJi0=C+TbGaCZaQ@mail.gmail.com>
Subject:	Protecting .netrc
To:	cygwin AT cygwin DOT com
X-Spam-Status:	No, score=-2.5 required=5.0 tests=BAYES_00, DKIM_SIGNED,
	DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, FREEMAIL_REPLY,
	HTML_MESSAGE, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS,
	TXREP autolearn=no autolearn_force=no version=3.4.2
X-Spam-Checker-Version:	SpamAssassin 3.4.2 (2018-09-13) on
	server2.sourceware.org
X-Content-Filtered-By:	Mailman/MimeDel 2.1.29
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<http://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From:	=?utf-8?q?Morten_Kj=C3=A6rulff_via_Cygwin?= <cygwin AT cygwin DOT com>
Reply-To:	=?UTF-8?Q?Morten_Kj=C3=A6rulff?= <mortenkjarulff AT gmail DOT com>
Sender:	"Cygwin" <cygwin-bounces AT cygwin DOT com>

Hi.

No need to say that putting passwords in plain text file is a bad idea.
But if I use .netrc, wouldn't below be a bit (lot?) safer?
Assuming I have a good passphrase on my key.

It seems so simple, that I fear I am not getting anything out of it.

Morten

#!/bin/sh

# Install utils/gnupg2

# gpg2 --generate-key

# mkdir ~/secrets

# gpg2 -e -r YOU AT EMAIL DOT COM <~/.netrc >~/secrets/netrc.enc

# rm ~/.netrc

# mkfifo ~/.netrc

while true ; do
  gpg2 -d <~/secrets/netrc.enc >~/.netrc
done
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -