Managing Subkeys for Professional and Personal UIDs

MFPA 2014-667rhzu3dc-lists-groups at riseup.net
Mon Apr 28 15:40:29 CEST 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi


On Sunday 27 April 2014 at 11:11:00 AM, in
<mid:20140427101100.GA24409 at glue.grepular.com>, Mike Cardwell wrote:



> I solve this problem using an OpenPGP smart card. My
> PGP key never touches my work machine, so I never have
> to worry about it being compromised.

Many employers would not allow you to plug in hardware, so you
couldn't use an OpenPGP smart card reader. And many would not allow
GnuPG at all if it was not something they generally used. Or if they
did use it, many would insist on key escrow or additional decryption
key, or using a key they generated for you.



> When I left my
> previous job, I revoked the UID containing the email
> address assigned by that company, and then added the
> new UID for the new company.

How did the previous employer feel about not having access to any
of your archived messages/documents?



- --
Best regards

MFPA                    mailto:2014-667rhzu3dc-lists-groups at riseup.net

An idealist is a person who helps other people to be prosperous
-----BEGIN PGP SIGNATURE-----

iPQEAQEKAF4FAlNeWlNXFIAAAAAALgAgaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl
bnBncC5maWZ0aGhvcnNlbWFuLm5ldEJBMjM5QjQ2ODFGMUVGOTUxOEU2QkQ0NjQ0
N0VDQTAzAAoJEKipC46tDG5pC3QD/1K7EUpy/39SeqisqPZKxILagneYBwSsiKVn
2zoXLpIJAVl2usP0TR55A2M70HPMru31vkChVagzPPXr0MLujg950AAERcROVuyY
rL2yCzEsuOz0M/C+ioadjivrQRxUcWKLv4qY71uXj7orm5uiK/IcJ3HwNmbkt8vU
F77LGp4L
=wl0O
-----END PGP SIGNATURE-----




More information about the Gnupg-users mailing list