3 ms·
If the user's browser runs in the same account as the user's mail client, then any browser exploit will be able to access the user's key. The keylogger would b
by jmillikin 14y ago
If the user's browser runs in the same account as the user's mail client, then any browser exploit will be able to access the user's key.
The keylogger would be to take the user's key password. To my knowledge, there is no way to hook up 2FA for accessing a GPG(,etc) key.
- napoleond 14y agoI think you're making some assumptions which don't apply to the system I'm working on. We're getting pretty far to the right margin in this thread, but I would love to continue this discussion out of band (and it's entirely possible that I really have missed something, in which case I would like to know it sooner rather than later). My email is in my profile :)