Dominik Schulz dc295b9ae1
Add recipients.hash checking (#2481)
This PR adds a new attempt at validating recipients files to prevent
malicious actors from updating them and tricking users into sharing
their new and updated secrets with a wider-than-inteded audience.

This includes two new config options (`recipients.hash` and
`recipients.check`) and one new command `gopass recipients ack`
to update the hash after validating it's content.

Fixes #2478

RELEASE_NOTES=[ENHANCEMENT] Add recipients hash checking.

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2022-12-18 18:20:58 +01:00
..
2021-11-13 21:24:32 +01:00
2022-11-25 10:50:34 +01:00
2022-01-15 21:13:36 +01:00
2022-12-18 18:20:58 +01:00
2018-08-11 07:17:35 +02:00
2022-12-01 22:54:02 +01:00
2020-05-26 07:47:05 +02:00
2022-05-30 19:38:20 +02:00
2020-05-26 07:47:05 +02:00
2020-05-26 07:47:05 +02:00
2022-01-15 21:13:36 +01:00
2022-12-04 12:40:59 +01:00
2020-04-24 17:43:38 +02:00
2021-01-21 23:32:51 +01:00