24 ms·
You know you shouldn’t move private keys around? Backup key should have separate private key and all websites should allow adding multiple keys.
by ozim 3y ago
You know you shouldn’t move private keys around?
Backup key should have separate private key and all websites should allow adding multiple keys.
- rgoulter 3y agoUsing a 'master key' like in the DrDuh guide does avoid moving the private key around while also allowing for using the same key on multiple devices. The DrDuh guide suggests generating the key offline (e.g. a live iso), and having a backup of that private key material somewhere. In DrDuh's guide, the 'master' private key is never accessible on an online machine, only the private subkeys. An advantage with YubiKeys is that the private key material can't be re-accessed, so putting the 3 private subkeys on the YubiKey is even nicer. I'd found it hard to visualise, so came up with these diagrams: https://rgoulter.com/blog/posts/programming/2022-06-10-a-visual-explanation-of-gpg-subkeys.html https://rgoulter.com/blog/posts/programming/2022-06-10-a-vis...
- wkat4242 3y ago> all websites should allow adding multiple keys Yeah tell that to Paypal and a ton of other sites :(