Hello,

Thank you for the explanation.

On Fri, Aug 11 2017, Jonathan McDowell wrote:

>  * If you don't want to buy hardware, use an offline master
>  key. Create
>    a certification only master key using something like PGP Clean Room
>    on a non-networked host [...]

By default, GnuPG creates a signing+certification master key.  Could you
explain why it's a good idea to override that?  I'm not sure what it
achieves.

-- 
Sean Whitton

Attachment: signature.asc
Description: PGP signature

Reply via email to