-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
On Thursday 27 July 2017 at 10:46:33 AM, in <mid:e74cc71a-5049-403b-32e0-ba9f0fe3f...@digitalbrains.com>, Peter Lebbing wrote:- > On 27/07/17 11:24, MFPA wrote: >> Have you considered using a password manager to >> remember them? > What would be the purpose? I guess I should have trimmed my quote less severely. Using a password manager would enable somebody who says they cannot remember multiple decent-quality unique passwords to not share passwords between different keys. > Adding a passphrase manager only introduces another > layer of indirection > plus extra steps for the user to unlock their key, Extra steps to open the password manager. Once open there are no extra steps for subsequent unlocking of the user's GnuPG key; it may even speed things up in the event that the password manager types passphrases quicker than the user can type them. > but it seems to solve > no actual problem. It just moves the item that is of > interest to the > attacker. The single point of failure stops being a passphrase used across multiple keys; it becomes the password required to open the password manager that protects the multiple passphrases. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> COMMITTEE: A body that keeps minutes and wastes hours. -----BEGIN PGP SIGNATURE----- iNUEARYKAH0WIQQzrO1O6RNO695qhQYXErxGGvd45AUCWXnOJ18UgAAAAAAuAChp c3N1ZXItZnByQG5vdGF0aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0MzNB Q0VENEVFOTEzNEVFQkRFNkE4NTA2MTcxMkJDNDYxQUY3NzhFNAAKCRAXErxGGvd4 5AZ3AQCaNMl2oJ3kDWTPScP4OvPcVmsyWa7C7+ZF/aBd9m8hSAD+KuwBpBMkbpp+ y5gn1fXIMZ5NLR8OXKIWF8nR32oNvASJAZMEAQEKAH0WIQSzrn7KmoyLMCaloPVr fHTOsx8l8AUCWXnOMl8UgAAAAAAuAChpc3N1ZXItZnByQG5vdGF0aW9ucy5vcGVu cGdwLmZpZnRoaG9yc2VtYW4ubmV0QjNBRTdFQ0E5QThDOEIzMDI2QTVBMEY1NkI3 Qzc0Q0VCMzFGMjVGMAAKCRBrfHTOsx8l8Hl8B/4xUCdIUueGMVTrU0bSd79ityjN oJQWk15Hz5tX/3BnVnn8xJMECTquow1Nf1XmwxKyaqME9pDtXPbFBHp+WzV04glT FD/4SgE0BPTtyadGbDHYaE0rHHPL1bzFg4f3F8uRz9otSHC6KeTLAhBJxBYQaK++ qYe2npD+IAUUU1sPluWGhrPWnu99c2Tw8REq/BH0T2sk4zwIkYTedGX1eExzH7Hw Kjdh9uMuBa1rWfaaYfsOnDrzvkdW3kmiu8ngdE4BCVEVtzqSvmDBP8+dxgZKzESK Bc5+HY2/pyB+0tWJ+Yaa8ilFeD9LDIbokrr/Iiyw0Frv3sVhXgrLhPYW2YYW =2vsb -----END PGP SIGNATURE----- _______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
