Who are you defending against?¶
"Is it secure?" is not answerable. "Secure against whom, doing what?" is. Answering that second question is called threat modelling.
| Attacker | What they have | Realistic? |
|---|
| Curious colleague | Valid access to some things | Very. The most common real incident. |
| Network eavesdropper | Sees traffic between you and the server | Yes: coffee shops, corporate proxies. |
| Someone who got the storage | A copy of the repository or a backup | Yes. Backups get copied to strange places. |
| Someone who owns the server | Full control of the machine holding everything | Rarer, but catastrophic where it applies. |
That last row is the one most systems fail, because most systems give the server the keys. Part 2 is about what happens when you refuse to.