All Secrets in Vault vs. Distributing Secrets

[fsflover]

Related:

Best Way To Setup A Global Share Folder?

I’m afraid that I cant give your questions the time they deserve. I do think you are reading too much in to those examples. The first - “the vault” - was intended to show how policies can be used in the normal case. Nothing more. This is normal Qubes vault. But you have interesting questions: I have a number of vaults - most have data generated internally, or transferred from non Qubes systems, using qvm-block. For these I have policies that prohibit write access from other qubes, and li…