Note that with subkey primary key is harder to leak or misuse

Closes #17

1 files changed, 2 insertions, 0 deletions

diff --git a/sq-guide.md b/sq-guide.md
index f448b8f..b8bd9d3 100644
--- a/sq-guide.md
+++ b/sq-guide.md
@@ -520,6 +520,8 @@ your certificate. This setup has several benefits:
 
 * you can have separate subkeys for encryption, signing, or
   authentication
+* it's harder to leak or misuse the primary key, as it's only used
+  rarely
 * you can use a smaller key when less security is OK in exchange for
   faster use
 * you can have a separate subkey for each device you have, or put