nicolas.boufideline/doc-public
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

2024-02-18-02

Browse source 
Signed-off-by: GnomeZworc <nicolas.boufidjeline@g3e.fr>
This commit is contained in:
GnomeZworc 2024-02-18 14:23:12 +01:00
commit 63668ed6d1
3 changed files with 50 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

13
source/tech_conf/gpg/recomandation.rst
View file

@ -4,12 +4,13 @@ Recommandation
Pour generer et manipuler des clees de chiffrement il est conseiller d'utiliser un environement dedier.
Les methode suivantes sont une liste d'environement classer du mon securiser au mieux:
1. Daily-use system with unrestricted network access
2. Virtual machine on daily-use host OS (using [virt-manager](https://virt-manager.org/), VirtualBox or VMware)
3. Dedicated and hardened [Debian](https://www.debian.org/) or [OpenBSD](https://www.openbsd.org/) system
4. Live image, such as [Debian Live](https://www.debian.org/CD/live/) or [Tails](https://tails.boum.org/index.en.html)
5. Hardened hardware and firmware ([Coreboot](https://www.coreboot.org/), [Intel ME removed](https://github.com/corna/me_cleaner))
6. Dedicated air-gapped system without network capabilities (ARM-based Raspberry Pi or other architecturally diverse equivalent)
#. Daily-use system with unrestricted network access
#. Virtual machine on daily-use host OS (using [virt-manager](https://virt-manager.org/), VirtualBox or VMware)
#. Dedicated and hardened [Debian](https://www.debian.org/) or [OpenBSD](https://www.openbsd.org/) system
#. Live image, such as [Debian Live](https://www.debian.org/CD/live/) or [Tails](https://tails.boum.org/index.en.html)
#. Hardened hardware and firmware ([Coreboot](https://www.coreboot.org/), [Intel ME removed](https://github.com/corna/me_cleaner))
#. Dedicated air-gapped system without network capabilities (ARM-based Raspberry Pi or other architecturally diverse equivalent)
Pour suivre ce tutoriel il est conseiller d'utiliser un linux live qui, pour pouvoir generer et manipuler les clees gpg en toutes securiter