- See here on how to strip the master key (sec) from your keyring and create secret subkeys (ssb) for daily active use.
- The master key can sign (S) new subkeys, create certificates (C) and provide authentication (A).
- The master key lives forever, while the ssb that is used for signing is created with an expiration date.
- All encryption keys may remain valid indefinitely until revoked.
- The master key can be used to revoke the subkeys.
+ See
+ here
+ on how to strip the master key (sec) from your keyring and create secret
+ subkeys (ssb) for daily active use. The master key can sign (S) new
+ subkeys, create certificates (C) and provide authentication (A). The
+ master key lives forever, while the ssb that is used for signing is
+ created with an expiration date. All encryption keys may remain valid
+ indefinitely until revoked. The master key can be used to revoke the
+ subkeys.
-
- A few considerations
-
-
use a separate PIN on the trusted system / for the master key (sec) in case a key-logger reads the PIN on a semi-trusted machine (e.g. laptop or android) when decrypting a secret subkey (ssb)
-
use subkey (A) for authenticating ssh
-
keep master key offline / air-gapped
-
+
A few considerations
+
+
+
+ use a separate PIN on the trusted system / for the master key (sec) in
+ case a key-logger reads the PIN on a semi-trusted machine (e.g. laptop
+ or android) when decrypting a secret subkey (ssb)
+
Recently, I came across a blog posting titled $HOME, sweet $HOME, where @blinry advocates for structuring your HOME directory based on projects and their activity. After reading this I felt inspired to finally have a look at the mess I made of my $HOME in the last years.
-
A few things about my old $HOME:
-
-
Documents contained basically everything I had accumulated during the last years besides music, videos, pictures and source code.
-
projects just contained one gigantic folder of all projects that I ever worked on. - the rest was based on the default xdg-user-dirs
-
-
-
If you sorted the files by file type like the default XDG directories
- suggest, files from one project may be scattered across many different
- directories.
-
So my goal for the new $HOME was to have a clean directory structure where: - it is obvious where to place new files - paths do not become too long to type out - the directory structure relates to how I work
-
A quick tour of my new $HOME:
+
+ Recently, I came across a blog posting titled
+ $HOME, sweet $HOME, where
+ @blinry advocates for structuring your
+ HOME directory based on projects and their activity. After
+ reading this I felt inspired to finally have a look at the mess I made
+ of my $HOME in the last years.
+
+
A few things about my old $HOME:
+
+
+
+ Documents contained basically everything I had
+ accumulated during the last years besides music, videos, pictures and
+ source code.
+
+
+ projects just contained one gigantic folder of all
+ projects that I ever worked on. - the rest was based on the default
+ xdg-user-dirs
+
+
+
+ If you sorted the files by file type like the default XDG directories
+ suggest, files from one project may be scattered across many different
+ directories.
+
+
+ So my goal for the new $HOME was to have a clean directory
+ structure where: - it is obvious where to place new files - paths do not
+ become too long to type out - the directory structure relates to how I
+ work
+
+
A quick tour of my new $HOME:
lib for immutable files
src for mutable files
@@ -32,19 +68,35 @@
tmp for unsorted files and downloads
The project directory
-
All of my projects are stored in src. I use a flat directory structure, where every project has its own subdirectory based on its name. Projects can become part of one or more larger contexts through the use of tags.
+
+ All of my projects are stored in src. I use a flat
+ directory structure, where every project has its own subdirectory based
+ on its name. Projects can become part of one or more larger contexts
+ through the use of tags.
+
Tags
-
Tag directories are stored in tag. Each directory stores symbolic links to parts of a project that can be distributed around lib and src. One possible use for the tag directories is creating workbenches. If I use some directories in lib or src in different contexts,
- tag can be used to include them in multiple workbenches.
+
+ Tag directories are stored in tag. Each directory stores
+ symbolic links to parts of a project that can be distributed around
+ lib and src. One possible use for the tag
+ directories is creating workbenches. If I use some directories in
+ lib or src in different contexts,
+ tag can be used to include them in multiple workbenches.
+
I create new tags for various reasons, but mostly one for each larger context (e.g. work, hobbies, admin foo, thesis, courseXY) and some more for tracking project activity. There are four different tags in tag directory right now for tracking project activity:
+
+
+ I create new tags for various reasons, but mostly one for each larger
+ context (e.g. work, hobbies, admin foo, thesis, courseXY) and some more
+ for tracking project activity. There are four different tags in
+ tag directory right now for tracking project activity:
+
+ Pads verschwinden unerwartet - Server tot - Niemand erinnert sich mehr
+ an den Link - Etherpad kann Löschfristen 🙈
+
+
Konsequenz:
+
+
🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥
🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥
🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥
🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥
@@ -45,13 +63,13 @@ mehr an den Link - Etherpad kann Löschfristen 🙈
🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥
🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥
🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥
-
-
Lösung 1: Copy-Paste
-
-
$Person kopiert ab und zu das Pad irgendwo hin
-
$Person braucht muss dran denken, ist aber etwas verplant
-
-
Pad Wiki
+
+
Lösung 1: Copy-Paste
+
+
$Person kopiert ab und zu das Pad irgendwo hin
+
$Person braucht muss dran denken, ist aber etwas verplant
+
+
Pad Wiki
+-------+ +-------+
|- Info | |- Info |
| ... | | ... |
@@ -60,28 +78,33 @@ mehr an den Link - Etherpad kann Löschfristen 🙈
|- Ideen| |- Ideen|
| ... | | ... |
+-------+ +-------+