Qubes OS: A reasonably secure operating system

Fun fact. The developer does not believe in using a password on her private keys.

If you have your keys on an air gapped computer with an encrypted hard-disk, I don't see the need to use an additional password on the private keys.

If you mean air-gapped literally, that seems unuseful.

Wouldn't you want the keys on the computer that's going to use them? And then, wouldn't you want to make it hard to copy the unencrypted private keys?

(I'm assuming we're talking about SSH keys.)

OTOH, it could be neat to run an ssh agent in a key-holding qube and forward that to whatever qubes need to use your SSH keys, using `ssh-add -c` so that key use must be confirmed in the key-holding qube.