From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1756376Ab1JCPJq (ORCPT ); Mon, 3 Oct 2011 11:09:46 -0400 Received: from hrndva-omtalb.mail.rr.com ([71.74.56.123]:49601 "EHLO hrndva-omtalb.mail.rr.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750987Ab1JCPJj (ORCPT ); Mon, 3 Oct 2011 11:09:39 -0400 X-Authority-Analysis: v=1.1 cv=XWD5/VRj2HUJOhsR8cgmvPBlhMACpZXxseY1Kn/ehQI= c=1 sm=0 a=GPLZHOGeRasA:10 a=5SG0PmZfjMsA:10 a=Q9fys5e9bTEA:10 a=17wjrS5wAhQaEczCPkpxpQ==:17 a=7O3H4tdZAAAA:8 a=gyy_yjy6DqaCIDUInX0A:9 a=PUjeQqilurYA:10 a=btqigNEo-2kInjr9:21 a=sNLrYS1XBwfl1d5m:21 a=17wjrS5wAhQaEczCPkpxpQ==:117 X-Cloudmark-Score: 0 X-Originating-IP: 74.67.83.30 Subject: Re: kernel.org status: establishing a PGP web of trust From: Steven Rostedt To: Greg KH Cc: Linux Kernel Mailing List , "H. Peter Anvin" Date: Mon, 03 Oct 2011 11:09:37 -0400 In-Reply-To: <20111003141312.GA4901@kroah.com> References: <4E8655CD.90107@zytor.com> <20111001140519.GA26662@kroah.com> <20111003091430.GA13919@home.goodmis.org> <20111003141312.GA4901@kroah.com> Content-Type: text/plain; charset="ISO-8859-15" X-Mailer: Evolution 3.0.3- Content-Transfer-Encoding: 7bit Message-ID: <1317654578.17991.1.camel@gandalf.stny.rr.com> Mime-Version: 1.0 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, 2011-10-03 at 07:13 -0700, Greg KH wrote: > On Mon, Oct 03, 2011 at 05:14:30AM -0400, Steven Rostedt wrote: > > On Sat, Oct 01, 2011 at 07:05:19AM -0700, Greg KH wrote: > > > > > > I would recommend a physical access device for your new gpg key that you > > > create. I've heard good things about this USB device: > > > http://www.crypto-stick.org/ > > > and am trying to have a bunch of them at the Kernel Summit this year to > > > hand out to people if they want one. > > > > Hmm, if I'm going to get one at KS, should I stop getting signed keys > > now? A few of us have already started the GPG song and dance to get > > signed keys over the phone (where we know each other enough to know > > phone numbers and recognize voices). > > You can put a key into the device, and then delete it from your > computer, so you don't have to create the key in the device. OK, then I'll go with my old plan to take my current key and put it on an encrypted USB stick and remove it from my main machine. When I get this new device, I'll add it to that device and use it afterward. Thanks! -- Steve