3 ms·
If you rotate your signing subkey then this would work as expected. Rotating primary/master keys is a problem in OpenPGP in general (not just Github).
by Boulth 8y ago
If you rotate your signing subkey then this would work as expected.
Rotating primary/master keys is a problem in OpenPGP in general (not just Github).
- 3pt14159 8y agoYeah. I guess I've tended to shy away from subkeys because I figure losing the primary is a function of time. Basically at some point a virus, or improperly secured backup, is going to get my key. Though I suppose the pro way of doing this would be to set up some kind of air gaped PC, generate the subkey, then display it as a QR code or something.
- Boulth 8y agoYes, that's what I did but instead of copying the subkey via QR I put it on a Yubikey. Actually it's more convenient that way as it's possible to use it on any computer. But from my perspective if you keep your master key super secure subkeys can be your "operational keys" that are easily swapped when needed (I rotated my subs when Yubico Infineon bug surfaced).
- mattigames 8y agoAir-gaped PC could be any old smartphone you (or some friend) have lying around and set it on airplane mode then use it to generate keys as QR images (if you are truly paranoid then root it and delete the wifi/bluetooth drivers or use a home-made faraday cage)