Does the macoOS login keychain get backed up by Time Machine backups in a way that could restore the keychain if the original machine's Secure Enclave is lost or destroyed?
But that’s not backup restore? I’m thinking Time Machine restore on a new Mac when old one is no longer working. Or when the old one had to be wiped and restored.
IIRC there are options for exportable and un-exportable private keys when you make one in the secure enclave. Going to guess Tahoe made them un-exportable by default.
And yet if you click export it will gladly print out a plaintext csv with your whole life in passwords. Doesn't even attempt to zip it with password or something.
that seems reasonable, as it is the lowest common denominator for interoperability
what would be dumb is if it was in some format that couldn't be used by other systems without extra work, and if the user weren't allowed to use their own computer to do something different
what would be dumb is if it was in some format that couldn't be used by other systems without extra work, and if the user weren't allowed to use their own computer to do something different