Securing Secret Keys
Fri Mar 28 15:35:01 2003
-----BEGIN PGP SIGNED MESSAGE-----
On Thu, Mar 27, 2003 at 08:01:49AM -0500, Brad Tilley wrote:
> I'm changing jobs, and I'll be leaving my old Linux workstation for a new one
> at another company. What is the proper way to remove my keys from the old
> machine? I don't want my private key to become suspect... I've had it for
> several years now.
It depends on your paranoia level. In decreasing order of
paranoia-level, some solutions are:
* Revoke the key.
* Buy your company another hard drive, and take this one with you.
* Wipe the hard drive (not really that effective with modern
Something to look into in the future is to use subkeys and keep your
primary secret key offline. Then, the worst that can happen is you
will generate some new subkeys and you get to keep your existing
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2rc1 (GNU/Linux)
-----END PGP SIGNATURE-----