[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: xz backdoor



On Sun, 2024-03-31 at 03:34 +0100, Wookey wrote:
> On 2024-03-30 20:52 +0100, Ansgar 🙀 wrote:
> > Yubikeys, Nitrokeys, GNUK, OpenPGP smartcards and similar devices.
> > Possibly also TPM modules in computers.
> > 
> > These can usually be used for both OpenPGP and SSH keys.
> 
> Slightly off-topic, but a couple of recent posts have given me the
> same thought:
> 
> Can someone point to good docs on this?  I've had a yubikey for 3/4
> of
> a year now but have not yet worked out how I put my GPG key in it.
> (or
> if it should be another key, or a subkey, or whatever). So I'm not
> actually using it yet.

I've also been thinking I needed to this, and so far this has looked
like the most detailed write up I've found so far.

I haven't followed the advice but I've been working on trying to
understand it.

https://github.com/drduh/YubiKey-Guide

I'd like to know how subkeys interact with signing packages and there's
an two ways of storing ssh keys with yubikeys. This write up describes
one and mentions the other exists.

Diane

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: