the pgp passphrase faq suggests a procedure that attempts a better balance between theoretical security and practicality than this example. all procedures for picking a passphrase involve a tradeoff between security and ease of use; security should be at least "adequate" while not "too seriously" annoying users. both criteria should be evaluated to match particular situations.