private key protection

[Jerome Baum]

> Right, that's a good point I think we all considered "trivial" when
> maybe we shouldn't have. In your threat model you should determine for
> how long your data should be safe (per attacker type) before you go
> ahead and make decisions about key protection.

To clarify, this is what we should tell the OT instead of telling him
stuff like "smart cards are 'better'". Kumtraya!

-- 
PGP: A0E4 B2D4 94E6 20EE 85BA E45B 63E4 2BD8 C58C 753A
PGP: 2C23 EBFF DF1A 840D 2351 F5F5 F25B A03F 2152 36DA