Re: handling private keys

[Radu Spineanu <radus@smartpost.ro>]

Edward Faulkner wrote:

> As to your question, once someone roots your box all bets are off.  If
> you're really paranoid about these keys, keep them on a dedicated
> machine that's extremely locked down.  Or even a machine with no
> network at all, and move data back and forth on a usb drive.
> 
I was thinking about doing local authentication using gpg keys stored on
the usb memory.

I remember something about an OS that handled all authentication using
one daemon, i can't remember how it was called.

Radu