On Tue, Jul 12, 2011 at 10:31 PM, Barry Warsaw <email address hidden>wrote:
> Public bug reported:
>
> So, I lost my encrypted $HOME yesterday because my ~/.ecryptfs/wrapped-
> passphrase file got deleted
May I ask how this happened?
> and I could not find the slip of paper I'd
> written my unwrapped passphrase on. I chatted with Dustin about it and
> he suggested that in the future I upload wrapped-passphrase to
> keyescrow.net.
>
> It occurred to me that we have a better solution: why not copy the file
> to your U1 share? Okay, you couldn't do this until your new machine is
> set up to use U1, and it would have to be opt-in because your wrapped-
> passphrase is only safe-ish. (It is encrypted with your login
> passphrase, but some folks might want stronger encryption, e.g. with
> gpg, before it was copied to U1).
>
> I mentioned this to Dustin on IRC and he actually suggested that for a
> better experience, it would be good to sync all of ~/.ecryptfs.
I've heard there were issues with syncing files to U1 with long filenames
and users even reported data loss. Have you seen the bug reports about this?
Hi Barry,
On Tue, Jul 12, 2011 at 10:31 PM, Barry Warsaw <email address hidden>wrote:
> Public bug reported: wrapped-
>
> So, I lost my encrypted $HOME yesterday because my ~/.ecryptfs/
> passphrase file got deleted
May I ask how this happened?
> and I could not find the slip of paper I'd
> written my unwrapped passphrase on. I chatted with Dustin about it and
> he suggested that in the future I upload wrapped-passphrase to
> keyescrow.net.
>
> It occurred to me that we have a better solution: why not copy the file
> to your U1 share? Okay, you couldn't do this until your new machine is
> set up to use U1, and it would have to be opt-in because your wrapped-
> passphrase is only safe-ish. (It is encrypted with your login
> passphrase, but some folks might want stronger encryption, e.g. with
> gpg, before it was copied to U1).
>
> I mentioned this to Dustin on IRC and he actually suggested that for a
> better experience, it would be good to sync all of ~/.ecryptfs.
I've heard there were issues with syncing files to U1 with long filenames
and users even reported data loss. Have you seen the bug reports about this?
Sincerely,
Michał