On Sun, May 07, 2017 at 12:23:47PM -0500, Andrew David Wong wrote: > 1. LUKS passphrase > 2. Backup passphrase > 3. Screen locker passphrase > Managing these three allows me to have an arbitrary number of > additional secrets in VMs without having to remember anything else.
you really dont protect your gpg key with a passphrase??
and I assume you dont change the backup passphrase, because it needs to be high
entropy, despite being visible with "ps fax"…
I'm really not convinced this is a good setup, though of cause everything
depends on the thread model! :-)
--
cheers,
Holger
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/20170512115330.GC27029%40layer-acht.org.
For more options, visit https://groups.google.com/d/optout.
signature.asc
Description: Digital signature
