Date added
May 11, 2025, 6:17 a.m.
Description
Attached: 1 video
Made a little web server to unlock and mount encrypted ZFS datasets using passkeys and age.
What's neat is that the password never touches the client! Attackers need to compromise *first* the server, and *then* the passkey.
It's delightfully little code. https://github.com/FiloSottile/mostly-harmless/commit/b453995f5b6b9cf4ffa56e25e5390fb2995e955a