standard comment

marqueandreprisal--- via Gnupg-users <[email protected]> Mon, 25 May 2026 00:36:55 -0400

Newsgroups	gmane.comp.encryption.gpg.user
Message-ID	<[email protected]>

----------------------------------------

From: 
f3yrlbz3pm6kidor3rtwgy6afwzhrfntf1mo89drhkjnd9ad5oe3o4s15ak0j58@kolabnow.com
To: [email protected]
Date: May 25, 2026 02:36:47
Subject: intro

> Just let me introduce myself I am a GnuPG user looking for support. I 
> am new to all of this gpg2 my experiece goes back to original PGP.

How would this fine community recommend to make a standardized comment 
about keys being used in unsecure environments. For example buying an 
android™ off of the shelf and using keys with GnuPG Termux or Open 
Keychain is not sure because androids often have swap files which may be 
setup to dump memory and snag the private key.

Something like: Note also that some systems (especially android™) may 
have not secure swap files. This writes memory to disk. Unless measures 
are taken in the operating system to protect memory the sensitive 
material may be exposed.

Or: This key was created in an environment not known to be secure. 
(android™)

Or some combination of both as concise as possible.

Another to agree with myself upon the comment section should officialy 
make this a standard lack of security comment tag.

_______________________________________________
Gnupg-users mailing list
[email protected]
https://lists.gnupg.org/mailman/listinfo/gnupg-users

signature.asc (application/pgp-signature, 281 B)