From 76cd239ed211384bacac74d5161bd1205b408a1a Mon Sep 17 00:00:00 2001 From: Lars Wirzenius Date: Thu, 4 Nov 2021 09:28:33 +0200 Subject: Note that with subkey primary key is harder to leak or misuse Closes #17 --- sq-guide.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/sq-guide.md b/sq-guide.md index f448b8f..b8bd9d3 100644 --- a/sq-guide.md +++ b/sq-guide.md @@ -520,6 +520,8 @@ your certificate. This setup has several benefits: * you can have separate subkeys for encryption, signing, or authentication +* it's harder to leak or misuse the primary key, as it's only used + rarely * you can use a smaller key when less security is OK in exchange for faster use * you can have a separate subkey for each device you have, or put -- cgit v1.2.1