> On 23 Mar 2016, at 07:27, Dashamir Hoxha <dashoho...@gmail.com> wrote:
> 
> Is it OK to have a signing primary key? Is it useful?

A signing primary key is fine. I prefer making single-use subkeys for each of 
A,E,S but only the E subkey is strictly necessary. You can always generate the 
A,S subkeys later if you find you need them (e.g. if you buy a smartcard), and 
since you can always enforce use of your A,S subkeys (unlike E, where it's out 
of your hands) this shouldn't cause you any issues if you change your mind. 

If you are aiming your tool at beginners then single-use subkeys are probably 
overkill, so the GPG defaults are fine. In general, you should stick to the 
default behaviour unless you can justify doing otherwise. 

A
_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to