search

elasticdog / transcrypt

transparently encrypt files within a git repository
MIT License
1.46k stars 102 forks source link

Give examples re "There are much better options if your goal is to encrypt the entire repository." #36

Closed scalp42 closed 6 years ago

scalp42 commented 7 years ago

Regarding the statement:

There are much better options if your goal is to encrypt the entire repository.

Any chance you could give some examples of what you're referring to?

Thanks!

zvictor commented 7 years ago

I came here to open an issue asking exactly the same. Found it already opened and I still have no idea what the author meant with that phrase.

scalp42 commented 7 years ago

Might be worth pinging @elasticdog

elasticdog commented 7 years ago

This just means that the smudge/clean filter method of encrypting files isn't terribly efficient since it forks processes for each individual file that you want to keep secure. Any method of encrypting the entire repository (like full disk encryption, encrypted disk images, git-remote-gcrypt, git-annex encrypted remote, etc.) would work better if you want to keep the entire thing secure. It's a much different use case than the one that transcrypt tries to solve.

elasticdog commented 6 years ago

Keybase also now supports encrypted git repository hosting, which would work well for some circumstances.

Anyway, I'll close this issue out, as I don't know if I want to maintain a list of alternatives in the repository itself. If this question comes up a lot more and people aren't satisfied being pointed here, I can reconsider.