On Wed, Oct 12, 2011 at 12:48:57PM -0700, Adam Williamson wrote:
Sure. However, if you have multiple keys with multiple passphrases, then it's extra work to compromise each key.
Not true at all. If I keep my key(s) in a single location (a secure machine at my home), then either all keys in that location are secure or they've all been compromised. Someone with a rootkit on that machine can capture all of my keys and all of my passphrases.
let's say you have an account on kernel.org and one on linux.com. It may make some kind of sense to your workflow for you to keep the private key you use to access linux.com in your home directory on kernel.org.
If you do this, you're doing it wrong.
Rich.