From 124defcb5ea7ca9a77c5ae583a46c1f6359d11ed Mon Sep 17 00:00:00 2001 From: shr4pnel Date: Mon, 27 Jan 2025 18:59:41 +0000 Subject: [PATCH] =?UTF-8?q?Update=20shr4pnelblog=20=E2=80=9C2025-01-27-gpg?= =?UTF-8?q?-pgp-ssh-quickstart-for-beginners=E2=80=9D?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- _posts/2025-01-27-gpg-pgp-ssh-quickstart-for-beginners.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/_posts/2025-01-27-gpg-pgp-ssh-quickstart-for-beginners.md b/_posts/2025-01-27-gpg-pgp-ssh-quickstart-for-beginners.md index 08b98d7..83e3f1f 100644 --- a/_posts/2025-01-27-gpg-pgp-ssh-quickstart-for-beginners.md +++ b/_posts/2025-01-27-gpg-pgp-ssh-quickstart-for-beginners.md @@ -15,7 +15,7 @@ Pubkeys used to terrify me. Here's the starter guide that I wished I had before Never share your private key with anybody other than yourself. If you need it to be accessible on multiple devices, password protect your key (you will get a prompt to do this automatically), and transfer it over a secure connection, or preferably off of the network (usb stick, ext hdd). If someone else needs to access your server, they can make their own key, and you can add it to your config later. -Share your public key on the internet. Keep a link to your public key on your website, as well as on [keys.openpgp.org](keys.openpgp.org). Otherwise people won't be able to encrypt their messages to you! +Share your public key on the internet. Keep a link to your public key on your website, as well as on [keys.openpgp.org](https://keys.openpgp.org). Otherwise people won't be able to encrypt their messages to you! If you're going to keep password authentication on, make sure it's a good damn password. Use a free and open source audited password manager. I use proton pass. It is not free and open source. I wonder what [Richard](https://rms.sexy) would think.... @@ -69,7 +69,7 @@ I recommend using ed25519 as your algorithm, but rsa is absolutely fine for this ### Getting other people's public keys -Importing public keys is simple, too. GPG keys can be fetched remotely using [keys.openpgp.org](<>), which has helpful documentation. Some people might link their public key on their site. In this case, importing it is as easy as cURLing it into GPG. +Importing public keys is simple, too. GPG keys can be fetched remotely using [keys.openpgp.org](https://keys.openpgp.org/about/usage), which has helpful documentation. Some people might link their public key on their site. In this case, importing it is as easy as cURLing it into GPG. `curl -L example.com/my-key.pgp | gpg --import`