-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 2016-12-27 11:34, 5qfppt+dtaepv4a6ll7k via qubes-users wrote: >> Is this with or without an empty/blank key passphrase? > > Key is protected with a passphrase >
In that case, there's no need to change the documentation, since it already works as described (i.e., without a key passphrase). > >> Works fine for me with the default fedora-24 template. > > Between fedora-24 or fedora-24-minimal, which one is more > recommended in a security perspective? What I mean is, using the > standard fedora template with all apps installed on it advisable or > is it preferable to use a dedicated template or a minimal bare bone > template to diminish the surface attack? > The minimal template has a smaller attack surface in general, but it doesn't come with Split GPG pre-installed. There is probably not a significant difference, since the Split GPG protocol tightly controls inter-VM data transfer. There is no general recommendation here, since the degree to which the full vs. minimal template attack surface matters depends on your threat model. For some people, it makes more sense to save the disk space by not having an extra minimal template for it. - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJYY2d4AAoJENtN07w5UDAwCW4P/0SmNpZmrS/p1zlxMOJNn81Y BGxbcErD95vlKMkQnERSLFqCK2lTy9JykW0jR1cOJbpG2RWEn06zYe/a1jSm+HFL 9Nv0puMnCasyepoiMRXT/KtGlcbBpmSiRlOuavsJjB8m31X7ygedC4sP3aNix/Xb ngeZWVUSXMjOG9xMRdjY7VUw2J4IqkAELEDs5LrFiavWzoN7QDjtm88LN43WbU/q 2eOidZC5zdUzptZaC2oNH1dWfWDo8WWSL8zRjGaf1i1628OAJA0INmC1S3Xa4t2W yMxdN7OqBVMlMt1rXEgd316EgQ7PzQBQyhgMGsUMW0P/s1+BMqHZlwfV/hm+AnrZ Dw8sg74L4sbzcX50om6RVgp3CL/5NWTQgcKZL1q/OezhYTyanwBhgcuhC6FUQz3Q Gx0LLbOFE5QaB9S4k4+o47oHC2EZEclBfYMLHaXqJaFTdK+pFbxvtpHzRmJXEiBE hSxNySxK5GpQhODlwz401oogDXudJsf8qRfs/ueS+7/a1uZttIRHVbIz8icEjbzP y4nTItuRKC9K/Ku8A4QC/KFZmbgZpt9ueirlpnqwf/rXgk/Ytq57AxDzmZkvnl0J o2o+o9beT6ScTYSzAxlsnUVsOIFjJmsDomX2wl7BrQB/VtlIkmH5hNiKE5unTbCj g+8a+oL7knxlfsHa67zD =OgX0 -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b85e543d-6dfb-e32b-4b86-7543d4dfe55a%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
