4 ms·
I use it to manage airgapped system for some critical data, such as backup codes and OpenPGP private keys stored in encrypted LUKS volume. I don't run the syste
by Boulth 8y ago
I use it to manage airgapped system for some critical data, such as backup codes and OpenPGP private keys stored in encrypted LUKS volume. I don't run the system daily but definitely on a regular basis (each time GnuPG key needs its expiry extended and so).
- akerl_ 8y agoHow are you using Tails for managing an airgapped system? Is it just acting as a minimal secure Linux live image? I'd assume the Tor component isn't helpful for an airgapped system.
- Boulth 8y agoYes, that's right I don't use Tor. I could actually run Alpine but Tails has everything I need and it's clearly designed with privacy and security in mind (e.g. Tails is reproducibily built). Actually I have wifi card and hard drive removed and the state is kept only on 3 SD cards.
- lifeisstillgood 8y agoI would also be interested in the details - presumably the key on LUKS is your primary signing key and younuse the secondary ones locally?
- Boulth 8y agoActually all private keys are stored in there and copied to hardware tokens when needed. No software private key is ever used in my scheme. Having backups of private subkeys is not that important with signing subkeys but is critically important with encryption subkeys. If you've got more questions I'm happy to answer.
- lifeisstillgood 8y agoWhat is the use case for "my scheme" - is this similar to the approach widely known from Debian signing docs ? I am not sure where to start other than "describe what you do and why" :-) Am interested very much in learning new ideas in this space - contact details in my profile
- Boulth 8y agoNo problem, I've sent you an email.