Hacker News Reader

I trust a company whose existence depends on keeping my passwords secure over my own ability to keep my personal server secure.

It's not just ssh and gpg, it's every single service you have running on it, every piece of hardware and the OS itself.

View on HN

No. If gpg does its job you could even host the passwords in a public github repository. Several pass users do this; I used to, but my server has better availability than github over the last few years so I switched after being frustrated at not being able to sync new passwords to my phone a couple of times.

So, to be fair, I misspoke when I said I rely on the security of gpg AND ssh. Really, it all comes down to the security of gpg. I feel pretty okay about that.

Surely you mean "pretty good"?

Yes. In my variant of English they mean the same thing :)

Pretty sure he was referring to https://en.wikipedia.org/wiki/Pretty_Good_Privacy ;)

Reply on news.ycombinator.com