Protect pubring.gpg and secring.gpg

Faramir faramir.cl at gmail.com
Sat Sep 6 04:35:08 CEST 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

David Vegano escribió:
> 
> Great, but I don´t use any encrypt method for my emails.
> 
> I use gpg for protect my personal photos, of birthdays, holidays...

  Well, I don't know what other people would think about keyloggers and
the use of gpg just for file encryption, but I think in your case, a
keylogger would not be so terrible (provided it doesn't steal your
pass). But the problem is, if you already have a keylogger, you don't
know what else you could have. And the problem with encryption, is you
will always need a password to decrypt, so, instead of stealing your
key's pass, they can steal the pass used to decrypt the keyring, and
then they can steal the keyring itself. Another option is to use a
keyfile, instead of a password, but then you would need to protect that
keyfile... so you would have to encrypt it, and use another keyfile,
which would have to be encrypted...

  Or you can put your keyring in a removable media, like an USB flash
memory stick... but remember these devices can "die", and if you lose
your private keyring, you lose all the encrypted files too, since there
is no way to decrypt them without the keys... At least, you should have
a reliable backup.

 If you use windows, maybe you should install software to keep the
computer "clean" from malware. I don't know what is recommended for
other operating systems... Since I use windows, I know a couple of free
tools, like antivirus, firewall, and such, that can help a lot to keep
windows "safe".

  Best Regards
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBCAAGBQJIwexbAAoJEMV4f6PvczxAKbIIAJvHd4wjHnuyubh4EGwP3sNz
sEnJr06wbNNKaY1kdO1bxPaOYrz7S2OaHbXW8QSxpx3BVO6L8nA9v0uUelWxB/D4
7Kcb6EPCl1LKPTeV/ufP4E2E5Iy6Y9kAm+ugHZCYZM3dBG7K8GA//fe1QG5Oa+OB
fSh8YWP1k65Co904AdM8aKPL0pwz7guu6lCwIopLDhIYACtiCn56kKivEPENMaB/
uLSUta3XQhmDEBIcr0V0LMoVoC6mnWA0PReOXsToTx6n6PiB0xYe8JzaX5z71BDO
KJ7muLF4oeciElaEugMnF9e8VLxxQo362NG/L8Xmj8d0YupDk/1CJECBEE/9MPY=
=pLqF
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list