Hacker News Reader

>If you are going to go with option #1 then you should probably use an OpenGPG smart card. There are a number of vendors that sell them.

Has anybody been successful in buying one? I can never seem to locate a store that sells to the US.

View on HN

YubiKey now has OpenPGP smartcard functionality. The new YubiKey NEO can even operate over NFC with OpenKeychain for Android. You can use K-9 and store your PGP key on a physical token (the YubiKey). Quite useful if your threat model includes a compromised phone (e.g. malware) but not physical access (e.g. border crossings).

kernelconcepts.de sells them and ships to the U.S.

What's to stop your card being intercepted and replaced by a three letter agency when it's shipped. That's why a physical store with tamper seals is useful, or better yet when something is manufactured locally - then you can check before you buy.

If you're expecting trouble from state actors, then yes, you may want to consider other options.

Reply on news.ycombinator.com