4 ms·
Like the other comments, the risk of losing data/access/etc is not enough. The article even actively suggesting you DO NOT make backups of things. Now you
by dier 3y ago
Like the other comments, the risk of losing data/access/etc is not enough.
The article even actively suggesting you DO NOT make backups of things.
Now you’re ready to generate a new set of OpenPGP keys on the YubiKey, using the generate command:
gpg/card> generate
Make off-card backup of encryption key? (Y/n)
Enter n to ensure that the private keys never leave the YubiKey, and enter the admin PIN when prompted:
I suppose this is why it's an Opinionated guide as my opinions on how the actual target of a "remote adversary" should go about balancing security with risk.
- aidenn0 3y agoYeah, if you're paranoid about the key being stolen when generated, just unplug the network, boot a live DVD image, store it directly to a USB stick, and then unplug the USB stick before rebooting. I usually don't go through quite so many steps, so if my machine was already actively compromised when I generated my keys, then the attacker has my keys.