Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #236270
| Path | csiph.com!usenet.pasdenom.info!paganini.bofh.team!news.dns-netz.com!news.freedyn.net!newsfeed.xs4all.nl!newsfeed7.news.xs4all.nl!bofh.it!news.nic.it!robomod |
|---|---|
| From | Teemu Likonen <tlikonen@iki.fi> |
| Newsgroups | linux.debian.user |
| Subject | Re: [OT] openPGP: keeping primary key offline? |
| Date | Tue, 22 Jun 2021 13:10:02 +0200 |
| Message-ID | <CsMs2-vU-7@gated-at.bofh.it> (permalink) |
| References | <CsKgx-7vX-5@gated-at.bofh.it> |
| X-Original-To | debian-user@lists.debian.org |
| X-Mailbox-Line | From debian-user-request@lists.debian.org Tue Jun 22 11:07:37 2021 |
| Old-Return-Path | <tlikonen@iki.fi> |
| X-Amavis-Spam-Status | No, score=-13.2 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, LDO_WHITELIST=-5, MD5_SHA1_SUM=-1, PGPSIGNATURE=-5] autolearn=ham autolearn_force=no |
| X-Policyd-Weight | using cached result; rate: -5.5 |
| X-Greylist | delayed 422 seconds by postgrey-1.36 at bendel; Tue, 22 Jun 2021 11:07:27 UTC |
| User-Agent | Notmuch/0.32.1 (https://notmuchmail.org) Emacs/27.2.50 (x86_64-pc-linux-gnu) |
| Mail-Followup-To | debian-user@lists.debian.org |
| MIME-Version | 1.0 |
| Content-Type | multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" |
| Arc-Authentication-Results | i=1; ORIGINATING; auth=pass smtp.auth=tlikonen smtp.mailfrom=tlikonen@iki.fi |
| Arc-Seal | i=1; s=meesny; d=iki.fi; t=1624359621; a=rsa-sha256; cv=none; b=HDYWrpO6hj7w1BIe4uC/ArIuIbnAk6qWHyBUxOjtt5IDK+OvXl/smwaGtO8+ZbgiDh6yrz xS5FYMJMFNwHyZBaaPt2rnzeL7wDkMCheKFHCyHTLYfiF7BBXygcpC99U0JMd/aJh1/KAn g17pBojZr5CUSyp5lLPDURhAMRi9Ams= |
| Arc-Message-Signature | i=1; a=rsa-sha256; c=relaxed/relaxed; d=iki.fi; s=meesny; t=1624359621; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=cBxiuj7tq964xP1F/nZIiPJUYnKpi6VTq2UdpsYcI5M=; b=Rf46XDGtums0uUC91Cd1EKL40U9kuRj7OvdgL4bzFsLAVFFPNQPRKa+v0ZDd5gqbagnFAo 1m0Ygp3PuKwA9oeoxwBr0/JCG1R9n77pXifeTPw/0aaQCSb/h8xUI4hKY5OBD6psmMuFTE nPvrP74uMU7Y+0G3rKYZKC13W1DKko8= |
| X-Mailing-List | <debian-user@lists.debian.org> archive/latest/776850 |
| List-ID | <debian-user.lists.debian.org> |
| List-URL | <https://lists.debian.org/debian-user/> |
| List-Archive | https://lists.debian.org/msgid-search/87k0mm2mgw.fsf@iki.fi |
| Approved | robomod@news.nic.it |
| Lines | 38 |
| Organization | linux.* mail to news gateway |
| Sender | robomod@news.nic.it |
| X-Original-Date | Tue, 22 Jun 2021 14:00:15 +0300 |
| X-Original-Message-ID | <87k0mm2mgw.fsf@iki.fi> |
| X-Original-References | <70457561-1634-cc8b-49e3-c96d197f6eb5@debianlists.mobilxpress.net> |
| Xref | csiph.com linux.debian.user:236270 |
Show key headers only | View raw
[Multipart message — attachments visible in raw view] - view raw
* 2021-06-22 10:46:58+0200, Marco Möller wrote: > Regarding openPGP usage, it is recommended in several user guides to > keep the primary key offline and keeping on the main computer only > subkeys. I have read some of such guides. They imply considerations about relevant threats but unfortunately they often fail to define their threat model. They also don't acknowledge the fact that their threats are not relevant to all people. Crypto nerds like to create perfect (?) security systems. A user certainly can keep his primary key outside his usual key ring. It may build an extra barrier (together with passphrase) for others to steal and use the key -- or for the owner to lose it. But if you don't consider this a relevant threat then there is no need to keep your primary key far and offline. Key management guides don't know what is relevant to you. -- /// Teemu Likonen - .-.. https://www.iki.fi/tlikonen/ // OpenPGP: 4E1055DC84E9DFF613D78557719D69D324539450
Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread
[OT] openPGP: keeping primary key offline? Marco Möller <talby@debianlists.mobilxpress.net> - 2021-06-22 10:50 +0200 Re: [OT] openPGP: keeping primary key offline? Andrei POPESCU <andreimpopescu@gmail.com> - 2021-06-22 12:20 +0200 Re: [OT] openPGP: keeping primary key offline? Teemu Likonen <tlikonen@iki.fi> - 2021-06-22 13:10 +0200
csiph-web