I'm asking myself which one is better:
- Use the same PGP key pair for use with both private email addresses and business email addresses
- Use two separate PGP key pairs, one for private and one for business email addresses
From a cryptographic standpoint there should be no difference (assuming that I keep my private key safe). But is there any kind of best practice? I'm a little bit concerned about questions like meta data privacy, traceability and so one...
Using the same key for both makes every business partner I send an signed email know my private mail addresses.