security measures?

John W. Moore III johnmoore3rd at joimail.com
Sat Oct 15 17:35:54 CEST 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Mica Mijatovic wrote:

>>>2. frequency of changing passphrases
>>>	- in a user who accesses emails via net cafes (think keyloggers)
> 
> 
> Also good idea. Let's say after each use via net cafes, as soon as
> possible. Well, would be "ideally".

However, keep in mind this:  If a keylogger/spyware ensnares one's Key &
operable passphrase, then merely changing the passphrase once you get
home will not eliminate the "intruder" from now having a matching
combination for later use.

The "best/paranoid" practice would be to have a Key used only on one's
portable/Public PC device coupled with a "codeword" for each
correspondent to be inserted within each missive to confirm authenticity.

JOHN :)
Timestamp: Saturday 15 Oct 2005, 11:34 AM --400 (Eastern Daylight Time)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Public Key at:  http://tinyurl.com/8cpho
Comment: Gossamer Spider Web of Trust: http://www.gswot.org
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iQEcBAEBCAAGBQJDUSHVAAoJEBCGy9eAtCsPK2UH/R7Z0jvfkEkFgAE6hCi95ivb
fumRcg4IJzxIlueEc6kKVL2UppBPYjNIX8tCcTV31IsErDYN8ioijoci2fb15Sdl
qjSbVmkZ63SkePbfOeN9VvP4GhfSWEnOAOTV+T0b2xp8SsKFPomb12nmcnSKiWGJ
ouKPVBqNPLW5tTyfg54dHFl128JypRnvMwmLkEwvnNCfklTl1JVZso3sMZ0CtFCX
iYiMeKKpuMYqyoRUp6a9s34bJBQJhAL5L54hVEUI6xLSWQfM/9cwSRTZj7tqH52T
PnidQ9/UqSDFGM8xWnTdv2v4SekX4TI97N1G5zAX5ixctJ9toE5LfzKTiYd9eP0=
=u4a9
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list