Keyring on external encrypted drive

Peter Lebbing peter at digitalbrains.com
Thu May 23 20:43:28 CEST 2013


On 23/05/13 20:25, NdK wrote:
> Really useful, IMVHO. Unless you have to sign *a lot* of things...

Werner Koch does not agree it's a security feature (and I suppose that's why you
think it's useful), as he said in this[1] thread:

> In any case it is not a security measure because the host may simply
> cache the PIN and and silently do a verify command before each sign
> operation.  To avoid that simple workaround, a pinpad reader which
> filters the VERIFY command would be needed.

Peter.

[1] http://lists.gnupg.org/pipermail/gnupg-users/2013-February/046051.html

-- 
I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
You can send me encrypted mail if you want some privacy.
My key is available at <http://digitalbrains.com/2012/openpgp-key-peter>



More information about the Gnupg-users mailing list