On Mon, May 14, 2018 at 11:30:09AM -0400, Jean-Philippe Ouellet wrote: > On Mon, May 14, 2018 at 11:26 AM, Holger Levsen <[email protected]> wrote: > > On Mon, May 14, 2018 at 11:20:29AM -0400, Jean-Philippe Ouellet wrote: > >> The immediate impact on Qubes developers is that one should use > >> separate keys… > > > > or simple use an email client which cannot display html and doesnt > > active elements and reloading stuff from the internet. there are plenty > > of those good old email clients :) > > I agree with your recommendation, but consider it orthogonal. > > I would not be one bit surprised if there's some memory corruption > lurking somewhere in mutt, so I think separating email and signing is > a good idea regardless.
I agree. (and should have used "and" instead of "or" as my first word in
the previous reply.)
And this is even nicely documented, see qubes-doc/security/split-gpg.md
and "Advanced: Using Split GPG with Subkeys" there.
--
cheers,
Holger
--
You received this message because you are subscribed to the Google Groups
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-devel/20180514153705.rkehtynbejav2lpo%40layer-acht.org.
For more options, visit https://groups.google.com/d/optout.
signature.asc
Description: PGP signature
