[cutemonster]

> The private key (even encrypted) should never leave the server.

What about backing it up? Or if the server disappears in a fire, the key would be gone for good and one would generate a new pub-priv key pair?

What about server whole disk snapshot backups; they'd include the key?

> it's more likely that your PC gets infected than your server

That's a good point

[GauntletWizard]

Yes, you should generate a new keypair if the server disappears in a fire. No, you should not do whole-disk backups, but if you do secure them properly.

[cutemonster]

Thanks! I like this, it's also simpler than such backups and keeping them safe