Groups > linux.debian.user > #200763

Re: Syncing GnuPG between 2 system

From	deloptes <deloptes@gmail.com>
Newsgroups	linux.debian.user
Subject	Re: Syncing GnuPG between 2 system
Date	2018-09-30 01:10 +0200
Message-ID	<wDwx3-2PK-1@gated-at.bofh.it> (permalink)
References	(3 earlier) <wDbsB-6V6-1@gated-at.bofh.it> <wDhHI-2n6-3@gated-at.bofh.it> <wDnDs-5NB-17@gated-at.bofh.it> <wDnWO-5Uk-7@gated-at.bofh.it> <wDog9-6fO-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Jim Popovitch wrote:

> On Sat, 2018-09-29 at 09:50 -0400, Roberto C. Sánchez wrote:
>> If all you care about is the public keys for verifying signatures,
>> then I say don't bother trying to proactively sync.  Just let each
>> system get keys and key updates from the public keyservers as needed.
> 
> OK, that makes sense, and seems to be the popular opinion.
> 
>> Your original message seemed to inidicate that you wanted to both
>> verify signatures and also produce signatures on multiple
>> machines.  That was why I provided the link to the article on subkeys,
>> as I consider that to be the only sensible way to have signing
>> capabilities on multitple devices related to a single GnuPG
>> key.  Perhaps I misread your email in that regard.
> 
> 
> You read my email correctly.  I did quickly read and have bookmarked
> your link.  Thank you for that.
> 

IMO you sign based on the e-mail you use. IMO it is confusing with multiple
machines. A key is associated with identity -> the email.
With the sub keys you can add more identities. 
Still to encrypt you need the private key. It is sufficient to update the
private key on the other machines. You usually do not copy it over internet
connection. Some people use secure key cards, other encrypted usb sticks or
md/sd whatever cards.

the public keys are uploaded to the key server after updated (for example
signed by you) and downloaded/updated on the other machines when needed.

It is up to you to decide how you handle your security. It is a sensitive
topic, so general reading and understanding of the matter is required,
before proceeding in real life.

regards

Thread

Syncing GnuPG between 2 system Jim Popovitch <jim@k4vqc.com> - 2018-09-28 17:40 +0200
  Re: Syncing GnuPG between 2 system Roberto C. Sánchez <roberto@debian.org> - 2018-09-28 20:00 +0200
    Re: Syncing GnuPG between 2 system deloptes <deloptes@gmail.com> - 2018-09-29 01:50 +0200
      Re: Syncing GnuPG between 2 system Jim Popovitch <jim@k4vqc.com> - 2018-09-29 02:40 +0200
        Re: Syncing GnuPG between 2 system deloptes <deloptes@gmail.com> - 2018-09-29 09:20 +0200
          Re: Syncing GnuPG between 2 system Jim Popovitch <jim@k4vqc.com> - 2018-09-29 15:40 +0200
            Re: Syncing GnuPG between 2 system Roberto C. Sánchez <roberto@debian.org> - 2018-09-29 16:00 +0200
              Re: Syncing GnuPG between 2 system Jim Popovitch <jim@k4vqc.com> - 2018-09-29 16:20 +0200
                Re: Syncing GnuPG between 2 system deloptes <deloptes@gmail.com> - 2018-09-30 01:10 +0200
                Re: Syncing GnuPG between 2 system Teemu Likonen <tlikonen@iki.fi> - 2018-09-30 10:00 +0200
                Re: Syncing GnuPG between 2 system deloptes <deloptes@gmail.com> - 2018-09-30 19:40 +0200
                Re: Syncing GnuPG between 2 system Teemu Likonen <tlikonen@iki.fi> - 2018-09-30 19:50 +0200
                Re: Syncing GnuPG between 2 system deloptes <deloptes@gmail.com> - 2018-09-30 20:30 +0200
                Re: Syncing GnuPG between 2 system mick crane <mick.crane@gmail.com> - 2018-10-02 13:20 +0200
                Re: Syncing GnuPG between 2 system <tomas@tuxteam.de> - 2018-10-02 18:10 +0200
                Re: Syncing GnuPG between 2 system mick crane <mick.crane@gmail.com> - 2018-10-03 12:30 +0200

csiph-web