indeed, unless your computer is encrypted using a strong cipher. using a thing like yubikey would be much better
also once the key is decrypted, some malware might quite literally steal it from memory
someone said that using kleopatra for this was a bad idea
My key is on Yubikey
It's best to create key on airgapped system
Advantages: 1. I can easily take my key with me, 2. Key cannot be stolen without physically stealing the Yubikey (or my backup of the key), 3. Even if stolen, brute forcing the PIN is not an option, you only have 3 attempts, 4. Chassis is tamper-evident if not tamper-proof So... https://xkcd.com/538/
But it costs a fortune
Обсуждают сегодня