-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Hi Roland,

you no doubt have a need for email encryption. But remember: the chain is only
as strong as its weakest link.

Robert stated that USB is not going to solve the issue since you cannot trust
it: https://srlabs.de/badusb/

> What is the difference with operating it from a smart card?

The difference between a keyring stored on a USB device and a SmartCard is that
the SmartCard computes crucial operations itself and thus cannot easily be
tampered with.

The main question ist whether you trust the computer where you plug in the USB
storage device and why this is more secure than storing it on the (encrypted?!)
harddrive.

> If a smart card gets lost, it can be used by the finder if she knows the 
> pincodes.

Yes. If you employ a simple 4 digit PIN, that'll be a problem. However, OpenPGP
SmartCard PIN should be named Password or Passphrase since it accepts 6-32 char:
http://g10code.com/p-card.html

The main difference is that you KNOW if your SmartCard is missing while you
would not know if a trojan copied it (and now brute forces your passphrase).

Olav
- -- 
The Enigmail Project - OpenPGP Email Security For Mozilla Applications

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)
Comment: Dies ist eine elektronische Signatur - http://www.enigmail.net/
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=pHMh
-----END PGP SIGNATURE-----

_______________________________________________
enigmail-users mailing list
[email protected]
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Reply via email to