Going to look into this. The newer YubiKey can be used as a hardware signer where the private key is on the device (the hardware signer) and never leaves it

https://lauri.võsandi.com/2017/03/yubikey-for-gpg.html

#pgp