[giantg2]

Wasn't there a similar article a week or so back that used Yubikey and a TRNG for signing your certs? It seems like that might be a better way to do it?