Protect pubring.gpg and secring.gpg

[Faramir]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

David Vegano escribió:
> 
> uhmm, i see...
> 
> and would I to encrypt the secring.gpg file?
> 
> This form, if they intercept my passphrase (with a keylogger for
> example), they wouldn´t nothing to do.
> 
> It´s a goog idea encrypt secring.gpg file?

  Only if you remember to decrypt it before doing anything with GPG. And
that means you can't encrypt it using GPG, unless you use some kind of
self-extracting encryption. But you can put that file in and encrypted
drive...

  Before taking such measures, think about your threat model... are you
concerned about somebody havin physical access to your computer? Is it a
shared computer? Do you have admin rights?

  By the way, if you don't trust the computer you are using (because of
keyloggers, etc), then you can't trust your messages to remain safe...
the keylogger can record the message while you are composing it...

  Best Regards
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBCAAGBQJIwaWpAAoJEMV4f6PvczxAzU4H/1lk5H/46H8S8HhNXvw0qa+P
elyFjjh5LDP7/TbDcGqzuH22DQBcySk0xm4po3ecElf/HUwf2Pck/4PLyVMOvhzN
xrYrd8qjpykkHvdOMW+Izxj60TFgK04tFRSkkJci4GUjJHynyFgafD+GdWCi8Jhz
ox6H/3DBRiumR39JXan+yywPWEMz6XFzN7e2C+/wveiHuUIHZljHx5rwU3C8Sh0J
xTx0GxD6cxUAQuv6lRlVKkoWFyA6u9p65Ysf9fXVrTc68ofQpb15boA1zfeq6BO3
LrKJkPngKNqtZtniloSTH5yF7ObjBAvn9z6uC4DZ9Gv9HicHHuqkirhsljR7M7A=
=C+VC
-----END PGP SIGNATURE-----