93
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 30 Dec 2024
93 points (98.9% liked)
Ukraine
8389 readers
500 users here now
News and discussion related to Ukraine
🇺🇦 Sympathy for enemy combatants is prohibited.
🌻🤢No content depicting extreme violence or gore.
💥Posts containing combat footage should include [Combat] in title
🚷Combat videos containing any footage of a visible human involved must be flagged NSFW
❗ Server Rules
- Remember the human! (no harassment, threats, etc.)
- No racism or other discrimination
- No Nazis, QAnon or similar
- No porn
- No ads or spam (includes charities)
- No content against Finnish law
Donate to support Ukraine's Defense
Donate to support Humanitarian Aid
founded 2 years ago
MODERATORS
PGP-signed messages when?
(Every government official, journalist, should have a PGP Public Key distributed to everyone, and start signing messages. I mean, we are in the new era of Deepfakes, we need to be ready for the inevitable BS.)
PGP is outdated, proprietary software that most people should not use.
OpenPGP, the standard people often mean when referring to PGP, does not lend itself to mass adoption because it requires understanding of asymmetric cryptography, secure and reliable backups of private keys –lest you lose your cryptographic identity or, worse yet, it falls into the wrong hands– and capable hardware tokens like YubiKeys for secure usage –private keys should not be laying around in your system–, among other reasons. Proper usage is a must; mistakes are often not apparent and therefore breed a false sense of security. On top of that, OpenPGP has been forked, with LibrePGP threatening interoperability.
GnuPG, the software people often mean when referring to PGP, is very, very difficult to use right. I say that as an advanced user; the Keyoxide proof on my Lemmy profile and all the Keyoxide claims I've put in my key should at least prove my dedication to the OpenPGP ecosystem.
Although new implementations of OpenPGP like Sequoia PGP may make OpenPGP easier to use, OpenPGP remains a bad option for mass adoption. Domain-specific solutions like HTTPS, Signal and electronic identity cards are better candidates.
PGP needs to be easier for mass adoption IMHO. Something like Saltpack would be easier but idk how much I trust it now. It is opensource but I don't think keybase maintains it anymore.
Keybase itself is dead, so probably not, unfortunately.