2
votes
1answer
319 views

Crypto key storage and recovery — best practices?

We have a bunch of SSH, GPG, SSL and other private keys that, obviously: must only be available to the smallest number of people possible can't be "lost" if a hard drive dies or the building burns ...
0
votes
2answers
124 views

Need convincing PGP public key needs to be changed

So the situation is thus. We're working with another company and as part of some file distribution processing we have to encrypt some files before they are sent. The company in question sent us ...
5
votes
3answers
249 views

PGP: on the web, what if everything was tampered?

I am trying to wrap my head around how Public Key Cryptography can really work in a secure manner. From what I can gather, you go to example.com and download their PGP/GPG Public Key and add it to ...
1
vote
2answers
426 views

RPM issues after signing JDK 1.6 64-bit

I'm trying to sign the Java JDK 1.6u21 64-bit RPM on CentOS 5.5 for use with Spacewalk and I'm running into problems. It seems to sign okay, but then when I check the signature it seems to be missing ...
1
vote
1answer
75 views

Public key read-only storage

We use GnuPG for encrypting data, which we upload to a central storage. The public key is being stored on a web-server, and the encrypting script re-downloads it if it's changed. This was done in ...