Comment 10 for bug 264977

Revision history for this message
Dustin Kirkland  (kirkland) wrote : Re: [Bug 264977] Re: Filenames in ~/.Private are not encrypted
  • id_rsa Edit (12.0 KiB, application/octet-stream; name=id_rsa)

Your concerns are noted, and the upstream ecryptfs kernel developers
are working on it. They have working prototypes, and are submitting
to -mm as soon as possible. We absolutely understand, respect, and
desire the additional security that will bring.

I disagree with your points that this should be disabled or removed,
and that the feature is useless.

When you use gpg to encrypt a single file, does it encrypt the file
name as well? No, it does not.

We're not forcing anyone to use this feature. And we're not dictating
what data goes into ~/Private.

This entirely an opt-in program.

I'm attaching the private half of an ssh key, pulled from the
encrypted .Private directory. If you or anyone else is able to crack
it, we would like to hear about it.

:-Dustin