Hey HN, I've been working on Hansel [1] (an encrypted personal data store you can query with agents), and there wasn't a good way to use the modern macOS Data Protection Keychain.
Electron's safeStorage [2] uses the legacy file-based keychain, which allows other apps/agents to query it with the `security` CLI.
Not great when you have a dozen agents running in the background!
The Data Protection Keychain is nice because it limits access via code-signing access groups and lets you set access rules like Touch ID and/or password. 1: https://hansel.so/
- https://www.electronjs.org/docs/latest/api/safe-storage Comments URL: https://news.ycombinator.com/item?id=49349159 Points: 6 # Comments: 0