From a5b15bdf5b01682ff8e272162cc7c13d14ed5def Mon Sep 17 00:00:00 2001 From: unman Date: Sun, 11 May 2025 12:30:50 +0000 Subject: [PATCH] Add link to incomplete page on split-gpg-2 from current split-gpg page --- user/security-in-qubes/split-gpg.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/user/security-in-qubes/split-gpg.md b/user/security-in-qubes/split-gpg.md index 637b068f..86966b2f 100644 --- a/user/security-in-qubes/split-gpg.md +++ b/user/security-in-qubes/split-gpg.md @@ -16,6 +16,12 @@ ref: 168 title: Split GPG --- + + Split GPG implements a concept similar to having a smart card with your private GPG keys, except that the role of the "smart card" is played by another Qubes app qube. This way one not-so-trusted domain, e.g. the one where Thunderbird is running, can delegate all crypto operations -- such as encryption/decryption and signing -- to another, more trusted, network-isolated domain. This way the compromise of your domain where Thunderbird or another client app is running -- arguably a not-so-unthinkable scenario -- does not allow the attacker to automatically also steal all your keys.