[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: xz backdoor



Hi,

On Sun, Mar 31, 2024 at 02:31:37PM +0200, Pierre-Elliott Bécue wrote:
> Wookey <wookey@wookware.org> wrote on 31/03/2024 at 04:34:00+0200:
> 
> > On 2024-03-30 20:52 +0100, Ansgar 🙀 wrote:
> >> Yubikeys, Nitrokeys, GNUK, OpenPGP smartcards and similar devices.
> >> Possibly also TPM modules in computers.
> >> 
> >> These can usually be used for both OpenPGP and SSH keys.
> >
> > Slightly off-topic, but a couple of recent posts have given me the
> > same thought:
> >
> > Can someone point to good docs on this?  I've had a yubikey for 3/4 of
> > a year now but have not yet worked out how I put my GPG key in it. (or
> > if it should be another key, or a subkey, or whatever). So I'm not
> > actually using it yet.
> >
> > PEB also described what sounded like a very sensible way to manage
> > keys (using subkeys) in one of these threads but I don't know how to
> > do that myself.
> 
> I have started (and never finished) a blog article on how I use my
> YubiKey and what config I put in it. I'll definitely try to get it out
> before the end of next week. I'll probably extend it to mention the
> creation of GPG subkeys etc.

That would be really helpful! It's not that easy to find this kind of
information as Wookey said.

> I would also be happy if it helps my fellow DDs to try making an article
> about some basic crypto concepts regarding PGP, RSA et al. But not in
> the same piece I guess.

My suggestion is to create a wiki page with these concepts plus a guide
on best practices dor the gpg key (subkeys + hsm - yubikey and others).

Cheers,
Charles

Attachment: signature.asc
Description: PGP signature


Reply to: