Robert J. Hansen
rjh at sixdemonbag.org
Sun Apr 9 04:20:47 CEST 2017
> BUT, leaving your private key on your laptop, tablet, or phone is
> about as secure as leaving a spare key to your house under the door
This is not true, not for any sensible definition of 'secure'.
My passphrase is literally 16 random bytes read from /dev/random, base64
encoded, to produce a passphrase of 128 bits strength. If you'll pay to
run the ad, I'll happily publish my private key in the newspaper of your
choice. Yes, I'm serious.
If your private key is at risk of being seen by your adversaries then
it's extremely important to have a good passphrase. But so long as you
do, your private key is safe.
More information about the Gnupg-users