Need tips on how to backup my keys
reynt0 at cs.albany.edu
Thu Jan 24 19:56:42 CET 2008
On Thu, 24 Jan 2008, Steven Woody wrote:
. . .
> But where should I keep the copy?
. . .
One distinction is a place you control versus a place you
don't control. For the latter, there is likely to be a
distinction about how much they are like being under your
own control. A bank box to which you are the only person
holding a necessary key is supposed to be under your
control although in someone else's location; but your box
is exactly identifiable in bank records as being your stuff
and the bank may have another key or the lock can be drilled.
An attorney--in the USA, traditionally--is supposed to be
acting as your surrogate and to be legally able to resist
attempts to have the attorney act against your intentions;
but probably maintains labeling of what stuff belongs to whom.
A friend is just that, a personal rather than commercial
relation, whom you are trusting to do what you want; for
that reason may not have to identify your stuff externally as
yours, relying instead on his or her own memory, and probably
would be harder to identify as someone who might have stuff
of yours than a bank or attorney would be (unless Google's
possible attempts to do universal tracing of affinity groups
are successful). In any case, a strong passphrase is like
you having final control over access; and if you want to
backup the passphrase, you don't have to do that with the
same combination of control and identification as you use
for the key info backup.
More information about the Gnupg-users