The how-to guides:

  http://wiki.fsfe.org/Card_howtos

all steer people away from keeping the main key on a card.  Yet some of
the coloured notes here:

  http://www.gnupg.org/howtos/card-howto/en/ch05s02.html

suggest that may not be best practice today.

Can anyone comment on the state of play?

My understanding is that various possibilities exist, potentially with
multiple cards:

card 1:
- main RSA private key
- used for signing other keys
- kept in a safe at home

card 2:
- sub key
- signed by main key
- card that is kept in the wallet

_______________________________________________
Discussion mailing list
[email protected]
https://mail.fsfeurope.org/mailman/listinfo/discussion

Reply via email to