@freemo I have a YubiKey too, but only have one. So I'm afraid if I lost it, I can't get into my server 😂

@skyblond I usually recommend you keep the original key and encrypt it and secure it away. At the very least you shouldnt be using your master key anyway and should use subkeys.

I've been wondering this for a while: Is it possible to use a security key (such as a YubiKey) to sign arbitrary data other than challenges set by servers? Could they, for instance, be used in P2P applications or to sign messages or files?

@Hyolobrika You can setup GPG on YubiKeys, so you can sign and encrypt anything using GPG, but that need specific support from application.

@Hyolobrika

Yea thats trivial:

gpg --output doc.sig --sign doc.txt

@skyblond

Ty

@freemo Do you recommend a specific model of key?

@AmpBenzScientist Depends what algo you want to use and what key size... any v5 is your best bet though.

@freemo I appreciate it. I'll have to try one or a few out.

@AmpBenzScientist the choice is really just between what physical connector you want. v5 are pretty much all the same its just do you want usb a, c, thunderbolt or nfc

@freemo That's impressive.