Conversation
|
want to confirm that we are using pgp trust model and not trust on first use or classic trust models. (assuming here for a minute that GPG is being used to encrypt/decrypt emails) |
|
@cryptofilegsa we are using GPG to encrypt files to SFTP to a vendor, we have a public key from them we've committed as a secret, so no trust-on-first use. |
bin/setup
Outdated
There was a problem hiding this comment.
The Homebrew installation will only work on OS X, but this part of the script runs on Docker as well. How about we move this down below, under the part where the script exits if it's being run on Docker?
Also, if the Docker image doesn't come with gpg, we should update the Docker setup to install gpg.
There was a problem hiding this comment.
We would want to gpg --dearmor and gpg --import the keys in docker case as well, how would that work?
There was a problem hiding this comment.
Sound like we'll need to duplicate those calls? That's the easiest and simplest way I can think of.
There was a problem hiding this comment.
ok updated! verified that GPG was already included in our image
**Why**: We use gpg in the app now
2d4c2ac to
c3df25b
Compare
Why: We use gpg in the app now