4 ms·
The perfect is the enemy of the good. -- Voltaire OK, if you're going to downvote this, please tell me how you plan to convince git and Github to replace PGP
by monoideism 6y ago
The perfect is the enemy of the good.
-- Voltaire
OK, if you're going to downvote this, please tell me how you plan to convince git and Github to replace PGP with signify? Github in particular has invested significant time building up their PGP support.
Personally, I would be fine with signify, I've used it in the past and I like it, and I think people are right when they say we should move toward more focused, Unix-style cryptographic tools - for greenfield projects.
But that doesn't we should abandon all current uses of PGP, particularly when it's working as well as it is with git and Github. There's absolutely nothing wrong with it. It does what it's supposed to.
It took a long time to get PGP supported by Github, and now you're going to want them to change it?
Edit: If people want to add support to Git for signify, and lobby Github to support it, I'd be in favor. But strongly, strongly opposed to removing PGP support.
- wglb 6y agoYou might want to check out a couple blog posts https://latacora.micro.blog/2019/07/16/the-pgp-problem.html https://latacora.micro.blog/2019/07/16/the-pgp-problem.html https://blog.cryptographyengineering.com/2014/08/13/whats-matter-with-pgp/ https://blog.cryptographyengineering.com/2014/08/13/whats-ma... And don't complain about downvoting.
- deleted 6y ago[deleted]
- monoideism 6y agoI'm fine if you think I'm an idiot (I definitely can be), if you disagree with my stand on PGP, or my remark about downvoting. I'm often even willing to edit/change/correct my comments. But don't order me around. I'm not your employee, kid, or whoever it is you feel you have a right to speak to like that.