Firstly, thanks to all who responded to my previous rant. It turns out exactly what I wanted does exist in the form of a ID-000 format smartcard combined with a USB reader. Perfect. No idea why I couldn’t find that on my own prior to ranting, but very happy to have found it now.
Secondly, now that I’ve got my keys and management practices in order, it is time to begin transitioning to my new key.
I’m not going to paste the full statement into this post, but my new key is:
pub 4096R/A48F065A 2014-07-27 [expires: 2016-07-26] Key fingerprint = DBB7 64A1 797D 2E21 C799 3CD7 A628 CB5F A48F 065A uid Matthew Brown <matt @mattb.net.nz> uid Matthew Brown <mattb @debian.org> sub 4096R/1937883F 2014-07-27 [expires: 2016-07-26]
If you signed my old key, I’d very much appreciate a signature on my new key, details and instructions in the transition statement. I’m happy to reciprocate if you have a similarly signed transition statement to present.