Contents
Is it safe to expose public key?
The public key is meant to be public, so yes. It should be okay. If there is no need for you to do it then don’t put it out there for no reason but you should be fine.
Is PGP safe yet?
Q: Is PGP encryption secure? A: Yes. Though PGP is now more than 20 years old, there have been no vulnerabilities found in the basic implementation of the system.
Should you ever share your private key?
You should never give them your private key. Your system should automatically recognize the key that was used to encrypt the file and will select the appropriate private key for the decryption process. You only need to provide the passphrase for the key to validate that you are authorized to the unencrypted data.
Is it completely safe to publish an SSH public key?
No, but you can do it anyway without worries (lots of people do, just look at https://sks-keyservers.net/i/ or https://pgp.mit.edu/) The reason why it’s not completely safe is because if I know your public key, I can, with a neat piece of mathematics, calculate your private key.
What are the risks of publishing a client public key?
The additional risk from publishing your SSH client public key is small but not zero. The biggest risk is that your client public key is a weak one, something caused by faulty software. If you’re going to publish a client public key you might want to take steps to make sure your key isn’t a weak.
When do you create an OpenPGP key you create two subkeys?
When you create an OpenPGP key with GPG (which is the focus of this article), you create two subkeys by default: one for encryption and one for signing. The subkeys discussed in this article are only used for signing. The reason for this is that it is impossible to sensibly employ multiple encryption subkeys.
How to improve the security of your OpenPGP key?
The only sensible thing would be to distribute the public part of every encryption subkey and then anybody encrypting anything to you would need to send you the same message once for each encryption subkey you have created. This could certainly be problematic.