Re: [vox-tech] moving gpg keys to another computer

[Henry House <hajhouse@houseMAPSag.com>]

På onsdag, 08 oktober 2003, skrev p@dirac.org:
> hi all,
> 
> if my gnupg keyring and stuff is on from.host and i want to be able to
> sign and encrypt files on to.host, is it good enough to simply do this:
> 
>    scp -r me@from.host:.gnupg  me@to.host:
> 
> or are there other issues involved?  is it just a matter of copying the
> .gnupg directory to the other host?
> 
> i've never use gpg on to.host, so ~/.gnupg doesn't exist on to.host.

Yes, that will work. However, you may choose to instead create separate key
for the other system and sign it with your original key, so that if one host
is compromized you still have one unconpromized key, and to avoid file
synchronization worries. Or keep the key on a USB drive that you tote around
with you.

If the two hosts are on the same network, it would make sense to use NFS
instead of duplicating the directory. (I know that you already know about
NFS, so the last sentence is for others' benefit.)

-- 
Henry House
The unintelligible text that may follow is a digital signature. 
See <http://hajhouse.org/pgp> for information.  My OpenPGP key:
<http://hajhouse.org/hajhouse.asc>.

Attachment: pgp00002.pgp
Description: PGP signature