Wolf480pl on Nostr: nprofile1q…ata5k and how do you store the wireguard keys used in initrd? It sounds ...
nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpq4wdt285jux3c388pfcz0y0nrlnprtwdsg9ywyumdtl4u3teucvgqaata5k (nprofile…ta5k) and how do you store the wireguard keys used in initrd?
It sounds like a fun excercise, but I think it completely misses the point of tang: to use physical access to a particular network as an authentication factor.
If the attcker somehow copied your server's disk and is now trying to decrypt it, the wg key is right there, they can just connect to your wg server from anywhere in the world and have tang unkock the disk.
Sounds like a fun excercise tho.
It sounds like a fun excercise, but I think it completely misses the point of tang: to use physical access to a particular network as an authentication factor.
If the attcker somehow copied your server's disk and is now trying to decrypt it, the wg key is right there, they can just connect to your wg server from anywhere in the world and have tang unkock the disk.
Sounds like a fun excercise tho.