recentpopularlog in

mechazoidal : gpg   8

Washington State Electronic Notary Public endorsements
As of 2018/09/17, it's possible to use gnupg for official notarial acts in the state of Washington, at least for the DoL
wa_state  gpg  2018  government  us  legal 
5 weeks ago by mechazoidal
Latacora - The PGP Problem
- pgp is crusty and hard: gnupg is sprawling and unwieldy
- there are alternatives for some things:
- chat: signal, XMPP+OREMO
- sending files: wormhole
- backups: tarsnap
- signing packages: signify/minisign
- application data: libsodium
- encrypting files at rest: not a lot yet?
- identity management is still the elephant in the room: lawyers use PGP, if not for email
cryptography  security  pgp  gpg  2019  pmz  piperesearch 
july 2019 by mechazoidal
"A gpg-enabled mailing list manager with remailing-capabilities."
software  email  mailing_list  gpg 
january 2019 by mechazoidal
oss-security - Re: Recommendations GnuPG-2 replacement
"It's worth repeating: if the Acronym Agencies of various countries aren't sponsoring arms-length keyservers where they get all the traffic logs for some percentage of keyserver traffic, then they're incompetent. If they provide a useful public service and folks choose to use it, then they get the normal operator logs, because they're the operators. All legal. You don't know who is running the keyservers. You don't know what's happening to the logs. You don't know that the keyservers are trustworthy. They are, at most, a useful swamp for collecting the data from so that clients can do WoT calculations without caring about fishing in a contaminated swamp, as the WoT _if done right_ takes care of filtering out the sludge. If you care about privacy in who you talk with, get the keys from some other path, or run a keyserver, and use hkps with a certificate under your control."
security  gpg  pgp  espionage 
july 2018 by mechazoidal
Keyringer: encrypted and distributed secret sharing software
"i use keyringer since years for group password sharing from command line through git with openpgp and now it even has subgroup capabilities in addition to handling multiple repos…. it is not pass drop-in compatible tho."
But still the same problem as pass: files are not necessarily database entries, and 2PC would be nice.
security  passwords  software  tools  unix  gpg  git 
february 2017 by mechazoidal
Using YubiKey as a SmartCard for GPG and SSH
Complaints from users about trying to use yubikeys as GPG smartcards (it's mostly GPG's fault for differing between platforms)
yubikey  gpg  security  discussion  lobsters 
september 2016 by mechazoidal

Copy this bookmark:

to read