3 ms·
Been there and done that. People are backing up those keys, right? Could also disable the touch to decrypt feature while you performed the rekey?
by doubled112 5y ago
Been there and done that. People are backing up those keys, right?
Could also disable the touch to decrypt feature while you performed the rekey?
- jehteh 5y agoI hope people back up their GPG keys (and test their backups! My subkeys on the yubikey expire annually, forcing me to validate my master key backup at least once a year). Disabling touch is another option if you need to do a large batch of operations and are comfortable that your machine is secure.
- kenmacd 5y agoYou probably shouldn't be able to disable touch. If you can disable it then malware can disable it. I'd highly recommend using the `fix` option instead of `on` to make sure it can't be disabled.