3 ms·

If you can put up with GPG cards, gpg-agent knows how to pretend to be an SSH auth socket meaning it can do your signing for you. At key generation time you ca

by lvh 8y ago

If you can put up with GPG cards, gpg-agent knows how to pretend to be an SSH auth socket meaning it can do your signing for you. At key generation time you can dump the key (once!) and then feed it to paperkey as a backup.

tptacek 8y ago
Why would you do this? Isn't it almost just as simple to generate a second software key and paper-key that? The difference between propagating one key to servers or two is a single newline character.
- lvh 8y ago
  Sure, I think that’s a fine option too.