Re: Long Term Key Management With Hardware Tokens

2021-06-22 Thread Brandon Anderson via Gnupg-users
Or is it money? Something else? Money and usability are certain factors here. Most of these tokens are in the realm of $50 apiece; the GPG smart card, while closer to $20, is still another $30 in shipping, so it would be costly unless I purchased all ten upfront. Not to mention the user experi

Re: Long Term Key Management With Hardware Tokens

2021-06-22 Thread Ingo Klöcker
On Dienstag, 22. Juni 2021 20:47:45 CEST Brandon Anderson via Gnupg-users wrote: > I agree that for most people having a paper backup stolen is unlikely, > but then again, most people are not using GPG, to begin with, let alone > GPG with smartcards or security tokens. There are several security >

Re: Long Term Key Management With Hardware Tokens

2021-06-22 Thread Brandon Anderson via Gnupg-users
Many tutorials, examples, and articles that are talking about using Yubikeys and smartcards currently suggest making paper backups of the encryption key so you can add it to new devices if needed. But this, at least to me, feels like it's significantly reducing the value of using secure har

Re: Long Term Key Management With Hardware Tokens

2021-06-22 Thread Andrew Gallagher via Gnupg-users
On 22/06/2021 17:53, Brandon Anderson via Gnupg-users wrote: Many tutorials, examples, and articles that are talking about using Yubikeys and smartcards currently suggest making paper backups of the encryption key so you can add it to new devices if needed. But this, at least to me, feels lik

Re: Long Term Key Management With Hardware Tokens

2021-06-22 Thread Brandon Anderson via Gnupg-users
For the benefit of the archives, it is possible to encrypt outgoing emails to your own key as well as the recipient's key, which ensures that the sent-mail folder is readable by the sender. Most email clients will do so by default (e.g. mutt, thunderbird/enigmail), and in most such clients all

Re: Long Term Key Management With Hardware Tokens

2021-06-22 Thread Andrew Gallagher via Gnupg-users
On 22/06/2021 07:47, Brandon Anderson via Gnupg-users wrote: If you know the recipient, then solving the latter is easy. Ask the recipient to resend the message encrypted with your new key. In my setup, when something is sent, only the encrypted mail is sent to my sent folder, so if I were

Re: Long Term Key Management With Hardware Tokens

2021-06-22 Thread Werner Koch via Gnupg-users
On Mon, 21 Jun 2021 23:47, Brandon Anderson said: > the PIV functions only support 2048 RSA and NIST curves. The only card That's per PIV specs. > What would it take to add support for retirement key slots into the > GPG smartcard specification? If retirement slots were added to the > smartcard