[tlug] Managing PGP keys on multiple machines

[Mike Mazur <mmazur@example.com>]

Hello,

How would you manage your PGP key on multiple machines?

Say I have a desktop machine and a laptop. On my desktop I create a
public/private key pair with a strong passphrase. I use this key pair
to sign emails.

I would also like to send signed emails from my laptop. I could simply
transfer the private key from my desktop to my laptop. But what if I
lose my laptop? Since an attacker will have physical access to the disk,
will the passphrase be sufficient to maintain my secret key?

The other alternative is to create a new key pair for the laptop (but
the same identity). This becomes an inconvenience for those I
communicate with as they now must keep track of my multiple public
keys. If the laptop goes missing, only that one key can be revoked.

Thanks,
Mike