Security...
Feb. 25th, 2005 11:46 am![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
fleetfootmikeI have been upping various aspects of the security on my iBook...
...like not letting it auto-log in to my account, and making it ask for a password on returning from sleep or screensaver.
The fun one, though, is moving my GnuPG and SSH keys to a removeable drive, in this case my iPod Shuffle, like the PGP guidelines tell you to do, and like precious few folks actually do. This is actually a bit more fun than it sounds, because the iPod Shuffle gets formatted as VFAT, which doesn't understand about permissions, so SSH complains that the permissions on the files are too open.
Solution - the iPod has a password-protected, sparse, encrypted Mac disk image on it, which I can mount, and GnuPG and the SSH Agent know where to find.
Once I'm done with that, I'll burn a copy of the disk image to CD and Put It Some Place Safe (in case the iPod trashes its contents), and print off a copy of the GnuPG key revocation certificate, and store that someplace safe as well.
...like not letting it auto-log in to my account, and making it ask for a password on returning from sleep or screensaver.
The fun one, though, is moving my GnuPG and SSH keys to a removeable drive, in this case my iPod Shuffle, like the PGP guidelines tell you to do, and like precious few folks actually do. This is actually a bit more fun than it sounds, because the iPod Shuffle gets formatted as VFAT, which doesn't understand about permissions, so SSH complains that the permissions on the files are too open.
Solution - the iPod has a password-protected, sparse, encrypted Mac disk image on it, which I can mount, and GnuPG and the SSH Agent know where to find.
Once I'm done with that, I'll burn a copy of the disk image to CD and Put It Some Place Safe (in case the iPod trashes its contents), and print off a copy of the GnuPG key revocation certificate, and store that someplace safe as well.
