NODE cf8f2ea8Security of PGP private keys
jrk@sys.uea.ac.uk (Richard Kennaway)Wed, 27 Oct 93 07:52:41 PDT
PGP secret keys are protected by a password. Yet people have said that one
should not keep one's secret keyring on an insecure machine. Why?
-- ____
Richard Kennaway __\_ / School of Information Systems
Internet: jrk@sys.uea.ac.uk \ X/ University of East Anglia
uucp: ...mcsun!ukc!uea-sys!jrk \/ Norwich NR4 7TJ, U.K.
NODE 8a689109Re: Security of PGP private keys
"Perry E. Metzger" <pmetzger@lehman.com>Wed, 27 Oct 93 08:47:54 PDT
Richard Kennaway says:
> PGP secret keys are protected by a password. Yet people have said that one
> should not keep one's secret keyring on an insecure machine. Why?
Because people can capture your keystrokes when you enter in the
password. They then have your secret key.
Perry
NODE 2ebec80fRe: Security of PGP private keys
Brad Huntting <huntting@glarp.com>Wed, 27 Oct 93 16:02:42 PDT
> PGP secret keys are protected by a password. Yet people have said that one
> should not keep one's secret keyring on an insecure machine. Why?
Passwords are often guessable.
brad
NODE cb9c6ae4Re: Security of PGP private keys
zeek@io.comWed, 27 Oct 93 23:18:05 PDT
*> > PGP secret keys are protected by a password. Yet people have said that one
*> > should not keep one's secret keyring on an insecure machine. Why?
*>
*> Passwords are often guessable.
Passwords may also be picked up over telephone lines. It is good to keep
them short, wacko, and in human memory.
#$%Osd(@ is a good one.
-z
NODE a31b3600Re: Security of PGP private keys
J. Michael Diehl <mdiehl@triton.unm.edu>Wed, 27 Oct 93 23:38:05 PDT
According to zeek@io.com:
>
>
>
> *> > PGP secret keys are protected by a password. Yet people have said that one
> *> > should not keep one's secret keyring on an insecure machine. Why?
> *>
> *> Passwords are often guessable.
>
> Passwords may also be picked up over telephone lines. It is good to keep
> them short, wacko, and in human memory.
>
> #$%Osd(@ is a good one.
>
Ya right, about as good as qwerty, which is in many wordlists these days.
J. Michael Diehl ;^) |*The 2nd Amendment is there in case the
mdiehl@triton.unm.edu | Government forgets about the 1st! <RL>
Mike.Diehl@f29.n301.z1 |*God is a good Physicist, and an even
.fidonet.org | better Mathematician. <Me>
al945@cwns9.ins.cwru.edu|*I'm just looking for the opportunity to
(505) 299-2282 (voice) | be Politically Incorrect! <Me>
Can we impeach him yet? |*Protected by 18 USC 2511 and 18 USC 2703.