-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 Hi Roland,
you no doubt have a need for email encryption. But remember: the chain is only as strong as its weakest link. Robert stated that USB is not going to solve the issue since you cannot trust it: https://srlabs.de/badusb/ > What is the difference with operating it from a smart card? The difference between a keyring stored on a USB device and a SmartCard is that the SmartCard computes crucial operations itself and thus cannot easily be tampered with. The main question ist whether you trust the computer where you plug in the USB storage device and why this is more secure than storing it on the (encrypted?!) harddrive. > If a smart card gets lost, it can be used by the finder if she knows the > pincodes. Yes. If you employ a simple 4 digit PIN, that'll be a problem. However, OpenPGP SmartCard PIN should be named Password or Passphrase since it accepts 6-32 char: http://g10code.com/p-card.html The main difference is that you KNOW if your SmartCard is missing while you would not know if a trojan copied it (and now brute forces your passphrase). Olav - -- The Enigmail Project - OpenPGP Email Security For Mozilla Applications -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) Comment: Dies ist eine elektronische Signatur - http://www.enigmail.net/ iQGcBAEBAwAGBQJT4jfTAAoJEKGX32tq4e9WJXQL/3lJh+RbM36Czv2CPvwMT4RR iloL2lrO5T0eBteTmxCOCTm+VhYgSDu1OOCUngSNn1wkIdJLyAIf1dnqpu0UGpIa qnoiAKpv29iXC8X5CiNVKq5/H1wC6J/FmVgsGoliFuRHh4cvglMiXjQ79ocTtIBf F2UwPobnR3+FsIHWBccpR7EIt+N6rO91DREPssDIFytYs0aa405uj5cFi64m7UZ+ P0MAd4j5CdEAR9Ol/ceKbP48+nmyynHczM90RVXrB4ov9+7HEpQxzf8vmEhF7jhn SzAxWcfr6wdIP+pVKWEUYRzlWla8vUohx9Eu8xOe8MHylGI0DNgz5zCctJ/btCTN 9s9M3VUd8YZsZGFsoa4cdgNECOZ0RI1IICs3fjPJ58rI90G0kZozlv2uPqogdb9B H43hDPzfG1cQ2vsS0mxluBCv2oZuhky+x57iGA+MYXxLOXciVerxsO6fhaYtL7wI GSmzM90BO1aUsfskzc6sMc4N4+1NSWMgkmiyIrzwjQ== =pHMh -----END PGP SIGNATURE----- _______________________________________________ enigmail-users mailing list [email protected] To unsubscribe or make changes to your subscription click here: https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
