How to Generate GPG Subkeys for Everyday Use
World Crypto Network
Generates three RSA-4096 subkeys (signing, encryption, authentication) under a non-expiring master GPG key via 'gpg --expert --edit-key', each set to expire in one year. Annual subkey expiration forces rotation of keys in regular use—on hot machines or YubiKeys—while the master key remains stable for identity verification. This isolates risk: if a hot-machine key is compromised, only that subkey f

https://relay.towardsliberty.com/e51b32998aeab6a3248242908e613633ea835c1d46cc9d44434057769985ddcc.mp4