[Durham] OpenPGP links

[Oliver Burnett-Hall]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

It was good to see everyone who turned up at the cryptoparty on
Tuesday. I thought I'd share a couple of OpenPGP links that I think
might be useful.

The first is one that Mark pointed me to, and has a whole host of
suggestions for configuring GPG more securely:
https://help.riseup.net/pt/security/message-security/openpgp/gpg-best-practices

And here's an example gpg.conf file that implements these suggestions:
https://raw.githubusercontent.com/ioerror/duraconf/master/configs/gnupg/gpg.conf

I mentioned Diceware as a useful way of generating passphrases (not
just for OpenPGP, it's good for anything that can take a long
password, like SSH or WPA). You can get the wordlists from here (you'll
need to supply your own dice):
http://world.std.com/~reinhold/diceware.html

Finally, I was asked about using OpenPGP with multiple devices
including mobile ones. The way I've done this is to use multiple
subkeys, an approach I mostly stole from here:
https://alexcabal.com/creating-the-perfect-gpg-keypair/

Let me know if there's anything else you want to know more about.

- - olly
-----BEGIN PGP SIGNATURE-----
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=GtZe
-----END PGP SIGNATURE-----