Popular encrypted messaging app Signal is facing criticism over a security issue in its desktop application. Researchers and app users are raising
  • psvrh@lemmy.ca
    4·
    6 months ago

    Doesn’t… doesn’t then OpenSSH client store keys in text files?

    I’m trying to figure out how this is an issue, other than maybe Signal should be using an OS level keystore.

    • Jerkface (any/all)@lemmy.caEnglish
      1·
      6 months ago

      They are text files but they are not “plaintext”. They are (optionally) encrypted with a user-supplied password. That is why you need ssh-agent to stay sane.