All the idea behind this is to keep your keys in a safe place (VM without 
network), isolated from your application VM.

I've installed the work-gpg (keys vault) and created a mail VM with Thunderbird 
and Enigmail.

While Enigmail cannot create new keys on the vault (I have to manually import 
them), it allows me to download/copy the contents of my keys (private).

So, if my mail VM is compromised my keys may be stolen/used regardless of my 
keys being kept in a vault!

So, what's the purpose of split gpg?

Thanks for any feedback.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3963f411-b862-47a5-8289-600550007024%40googlegroups.com.

Reply via email to