On 12/10/13 00:22, Robin Kipp wrote: > I only put the --expert flag because I wanted to take advantage of having a > main key that can only sign and certify, and which I can then store offline.
The defaults are an RSA primary key for certification and signing, and an RSA subkey for encryption. Even without the --expert flag, you can also choose to generate a primary key just for certification and signing, and then in a second step add more subkeys. The choices of keys you get without --expert are: > Please select what kind of key you want: > (1) RSA and RSA (default) > (2) DSA and Elgamal > (3) DSA (sign only) > (4) RSA (sign only) So you don't need the --expert flag for that. HTH, Peter. -- I use the GNU Privacy Guard (GnuPG) in combination with Enigmail. You can send me encrypted mail if you want some privacy. My key is available at <http://digitalbrains.com/2012/openpgp-key-peter> _______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users