Re: Offline Primary Key

2010-03-02 Thread Werner Koch
On Mon, 1 Mar 2010 22:13, ds...@jabberwocky.com said: someone elses key. The current design effectively forces people to manually move the valuable primary key out of the way before clobbering it with the subkey-only copy of the key. Another important point is that if you want to use an

Re: Offline Primary Key

2010-03-02 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Werner Koch escribió: ... Another important point is that if you want to use an offline key you should create that key offline and export the subkeys to the online box. Doing this on the same box is a bit questionable. To me an offline key is

Re: Offline Primary Key

2010-03-02 Thread Ingo Klöcker
On Tuesday 02 March 2010, Faramir wrote: Werner Koch escribió: ... Another important point is that if you want to use an offline key you should create that key offline and export the subkeys to the online box. Doing this on the same box is a bit questionable. To me an offline key is

Re: Offline Primary Key

2010-03-01 Thread David Shaw
On Mar 1, 2010, at 12:20 PM, Phillip Susi wrote: I would like to keep the private portion of my primary key stored offline and use an expiring secondary key for day to day signing. To accomplish this I have tried backing up the key after creating the secondary signing key, then attempting

Re: Offline Primary Key

2010-03-01 Thread John Clizbe
David Shaw wrote: Didn't someone write a nice HOWTO about offline private keys at one point? I thought there was one out there, but can't find it at the moment. Can anyone post the URL for Philip? Adrian von Bidder's page is the only one that memory serves up:

Re: Offline Primary Key

2010-03-01 Thread Grant Olson
Can anyone post the URL for Philip? David http://fortytwo.ch/gpg/subkeys signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Offline Primary Key

2010-03-01 Thread Phillip Susi
On 3/1/2010 1:57 PM, David Shaw wrote: What you need to do is an --export-secret-subkeys (there is no such command as --delete-primary-keys). So, starting from a state where your whole key (primary and all secondaries) are all imported to your GPG instance, do: Yes, I meant

Re: Offline Primary Key

2010-03-01 Thread David Shaw
On Mar 1, 2010, at 2:59 PM, John Clizbe wrote: David Shaw wrote: Didn't someone write a nice HOWTO about offline private keys at one point? I thought there was one out there, but can't find it at the moment. Can anyone post the URL for Philip? Adrian von Bidder's page is the only one

Re: Offline Primary Key

2010-03-01 Thread David Shaw
On Mar 1, 2010, at 3:31 PM, Phillip Susi wrote: On 3/1/2010 1:57 PM, David Shaw wrote: What you need to do is an --export-secret-subkeys (there is no such command as --delete-primary-keys). So, starting from a state where your whole key (primary and all secondaries) are all imported to

Re: Offline Primary Key

2010-03-01 Thread David Shaw
On Mar 1, 2010, at 4:11 PM, Phillip Susi wrote: On 3/1/2010 3:37 PM, David Shaw wrote: This does the trick, but I still do not understand why --delete-secret-key removes BOTH the primary and subkey secrets when I specifically gave only the ID of the subkey? Shouldn't it remove exactly what

Re: Offline Primary Key

2010-03-01 Thread Phillip Susi
On 3/1/2010 3:37 PM, David Shaw wrote: This does the trick, but I still do not understand why --delete-secret-key removes BOTH the primary and subkey secrets when I specifically gave only the ID of the subkey? Shouldn't it remove exactly what I say and no more? It has to do with how keys are

Re: Offline Primary Key

2010-03-01 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David Shaw escribió: ... Didn't someone write a nice HOWTO about offline private keys at one point? I thought there was one out there, but can't find it at the moment. Can anyone post the URL for Philip?