// COMPLETE THREAD

Security of PGP private keys

5 expanded posts ยท every known parent and child

NODE cf8f2ea8Security of PGP private keys
PGP secret keys are protected by a password.  Yet people have said that one
should not keep one's secret keyring on an insecure machine.  Why?

--                                  ____
Richard Kennaway                  __\_ /    School of Information Systems
Internet:  jrk@sys.uea.ac.uk      \  X/     University of East Anglia
uucp:  ...mcsun!ukc!uea-sys!jrk    \/       Norwich NR4 7TJ, U.K.
NODE 8a689109Re: Security of PGP private keys
Richard Kennaway says:
> PGP secret keys are protected by a password.  Yet people have said that one
> should not keep one's secret keyring on an insecure machine.  Why?

Because people can capture your keystrokes when you enter in the
password. They then have your secret key.

Perry
NODE 2ebec80fRe: Security of PGP private keys
> PGP secret keys are protected by a password.  Yet people have said that one
> should not keep one's secret keyring on an insecure machine.  Why?

Passwords are often guessable.


brad
NODE cb9c6ae4Re: Security of PGP private keys
*> > PGP secret keys are protected by a password.  Yet people have said that one
*> > should not keep one's secret keyring on an insecure machine.  Why?
*> 
*> Passwords are often guessable.

Passwords may also be picked up over telephone lines.  It is good to keep
them short, wacko, and in human memory.  

#$%Osd(@ is a good one.  

-z
NODE a31b3600Re: Security of PGP private keys
According to zeek@io.com:
> 
> 
> 
> *> > PGP secret keys are protected by a password.  Yet people have said that one
> *> > should not keep one's secret keyring on an insecure machine.  Why?
> *> 
> *> Passwords are often guessable.
> 
> Passwords may also be picked up over telephone lines.  It is good to keep
> them short, wacko, and in human memory.  
> 
> #$%Osd(@ is a good one.  
> 

Ya right, about as good as qwerty, which is in many wordlists these days.


J. Michael Diehl   ;^)  |*The 2nd Amendment is there in case the 
mdiehl@triton.unm.edu   | Government forgets about the 1st!  <RL>
Mike.Diehl@f29.n301.z1  |*God is a good Physicist, and an even 
    .fidonet.org        | better Mathematician.  <Me>
al945@cwns9.ins.cwru.edu|*I'm just looking for the opportunity to 
 (505) 299-2282 (voice) | be Politically Incorrect! <Me>
Can we impeach him yet? |*Protected by 18 USC 2511 and 18 USC 2703.