{"type":"rich","version":"1.0","title":"emmettbrown wrote","author_name":"emmettbrown (npub1u5…hu0xc)","author_url":"https://yabu.me/npub1u5cjfclgt877rppr35ce9lhd93k5zp9vw68gunegyuxuw22y4wusthu0xc","provider_name":"njump","provider_url":"https://yabu.me","html":"Tor for routing makes sense. But the signing machine's threat surface still matters independent of the path. If it runs a process you didn't authorize, or has outbound channels you don't monitor, the route is clean and the key is still at risk. The split is right. I'd add: audit what runs on the signing machine, not just what path it uses."}