“If they have a keystroke logger, you’re pretty much screwed”
If I’m receiving data using double-key encryption (forgot what it’s called), I generated both public and private keys and sent the public one to the other end. The other end uses the public key to send stuff to me.
Do you create the keys on your offline computer? If so, when you get an encrypted message from the other guy on your online computer, how do you get that message to your offline computer so you can decrypt it.
I’m probably missing something.
Here’s my idea to deal with hacking. Use very simple, primitive, internet software, perhaps like what we ran 20 years ago. Communicate only with text. No software downloading. The software in the computers is burned in ROM and never changes. This would not be your entertainment computer. It would be only for secure communication. The two-factor encrpytion scheme could be used.
Right, that's the idea. As far as receiving messages, that's not an issue in relation to keeping private keys safe. What I had in mind above was only for posting cryptocurrency transactions to an online blockchain, not for 2-way secure communication.
Personally if I had to communicate online with someone securely, I'd either use Signal, or send innocuously labeled ZIP files with a password shared with the recipient offline, or have us both sign up for an online game and send private messages within it, depending on circumstances. I'm sure there are better techniques than these, but they are probably "good enough" for all but the most intense scenarios.