[arch-general] How long do you make the passphrase for the private key?

[mpan]

> Black hats are able to hack Google and Facebook, what ever you
> will do, you never ever will be able to reach the level of security
> those and the other most successful computer related companies are able
> to accomplish.
  In 2015 four men have stolen equivalent of 200M GBP from Hatton Garden
Safe Deposit. Does that mean you are not locking your door, because
“thieves can get in anyway”?

  The argument would make sense, if the better solution would be
considerably more expensive. But in 21th century it is not. Everyone can
get good security without effort. There is no need to artificially
decrease it.

  The topic is also about signing packages, that will be available to
others. There is much more at stake here than just Manuel Reimer’s
security and aiming for the best should be encouraged. Happily for us,
nowadays he can achieve that easily.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <https://lists.archlinux.org/pipermail/arch-general/attachments/20190625/08b78282/attachment.sig>