|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Thanks Olav, Clear explanation. Can we go the smartcard route already with GPG/Enigmail? Thx Roland On 06/08/2014 16:12, Olav Seyfarth wrote: > Hi Roland, > > you no doubt have a need for email encryption. But remember: the chain is only > as strong as its weakest link. > > Robert stated that USB is not going to solve the issue since you cannot trust > it: https://srlabs.de/badusb/ > > > What is the difference with operating it from a smart card? > > The difference between a keyring stored on a USB device and a SmartCard is that > the SmartCard computes crucial operations itself and thus cannot easily be > tampered with. > > The main question ist whether you trust the computer where you plug in the USB > storage device and why this is more secure than storing it on the (encrypted?!) > harddrive. > > > If a smart card gets lost, it can be used by the finder if she knows the > > pincodes. > > Yes. If you employ a simple 4 digit PIN, that'll be a problem. However, OpenPGP > SmartCard PIN should be named Password or Passphrase since it accepts 6-32 char: > http://g10code.com/p-card.html > > The main difference is that you KNOW if your SmartCard is missing while you > would not know if a trojan copied it (and now brute forces your passphrase). > > Olav > > _______________________________________________ > enigmail-users mailing list > [email protected] > To unsubscribe or make changes to your subscription click here: > https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net > > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.21 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJT4kvGAAoJEK7sXi7Ydij1H1QH/3R6lrcAajwokKA9Zi1xSIef ZIi+vryUx4wfss+4V7Ybk3knDgI29OaH1NS+/X/xGXkSzwD49qlv4W8TQaNq/Zh4 bcPY8ARcoCfgzdc4XMUy760gFT/r4MwB1JEOcHj22kzVCaDUJ46Wgs54X4bq+ioj pOLxyLss9o101MSeG8ngmHtOY3O94+KdZVyafq9r1UvzBBUNuDpjlsXKEeTVfyKr iVmlUuxhJO6tXfQgku+BrgkqNAKA3VDXsk0ajvDb5hKSX/rgILnbLQLz4LeHtvas HR5JXsMwy8woEfjL+hHc+XcDfgRJmBuCf3HskG75R4d0v0Yy+wrZ/DfZ7U+1uB4= =/lNB -----END PGP SIGNATURE----- |
_______________________________________________ enigmail-users mailing list [email protected] To unsubscribe or make changes to your subscription click here: https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
