Re: Enforcing password complexity for private keys

2019-04-30 Thread David Milet
gt; my2c > Juergen > >> Am 30.04.19 um 19:40 schrieb David Milet: >> Yes, we’re considering using smart cards or usb devices like Yubikey. >> Do those enforce password complexity? >> >> To answer suggestions in other replies, our developers are savvy enough, an

Re: Enforcing password complexity for private keys

2019-04-30 Thread David Milet
Believe me we have long and passionate discussions about passwords length and complexity. The question in my post is purely technical. > On Apr 30, 2019, at 13:51, Michał Górny wrote: > >> On Tue, 2019-04-30 at 13:40 -0400, David Milet wrote: >> Yes, we’re considering us

Re: Enforcing password complexity for private keys

2019-04-30 Thread David Milet
; Juergen > >> Am 30.04.19 um 12:55 schrieb David Milet: >> Hello >> >> We’re considering rolling out GnuPG at work for developers to sign git >> commits. >> How can we prevent developers from choosing a trivial password? >> >> Is there a way fo

Enforcing password complexity for private keys

2019-04-30 Thread David Milet
Hello We’re considering rolling out GnuPG at work for developers to sign git commits. How can we prevent developers from choosing a trivial password? Is there a way for GnuPG to enforce some password complexity on the private keys? Is that something that a Yubikey could do? Many thanks! David