Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature] Automatically re-use recovery protector when re-using login protector #252

Open
Redsandro opened this issue Sep 11, 2020 · 1 comment

Comments

@Redsandro
Copy link

Encrypting a new directory with a new v2 policy re-uses the login protector. However, it does not re-use the recovery protector, but creates a new one (Y/n). User ends up with multiple directories with the same login protector but different recovery protectors.

After offering to create a recovery protector (recommended), perhaps fscrypt can ask if the user would like to re-use [list all keys with "Recovery" in the description] or create a new one.

Or detect what recovery protector is used by another policy that uses the login protector.

In the end it makes sense for the user to have the same recovery passphrase for directories that use the same login protector.

@josephlr
Copy link
Member

This was exactly my thinking, will probably mesh well with #249

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants