4 ms·
As a side note, with so much attention on replacing PGP, I've long though the turning point would be when a group like this uses something else. It's just a hig
by technion 6y ago
As a side note, with so much attention on replacing PGP, I've long though the turning point would be when a group like this uses something else. It's just a highly visible thing and it's a group that a lot of people assume know what they are doing.
- KirillPanov 6y ago> with so much attention on replacing PGP There actually isn't much attention on replacing PGP with anything specific. What other completely decentralized alternatives exist with no single point of failure? libsodium? That's a good start but a long way from a complete alternative. Plenty of quasi-centralized encrypted chat "apps" keep pretending they offer what PGP offers. The clueful ignore these gesticulations.
- technion 6y agoFor the context right here minisign would be perfectly capable. The post on this thread is not encrypted, there's no "decentralized" relevancy. Minisign has smaller keys and forces modern technology with a far simpler format.
- xmodem 6y agoIndeed, for a side project I have, I have a problem I want to be able to solve of "encrypt a file with a passphrase in a way that's secure and can be decrypted with standard tools". PGP is the best option for this, but I'm resisting implementing it in the hope I can find something better.
- technion 6y agoYou may wish to look at age: https://github.com/FiloSottile/age https://github.com/FiloSottile/age
- xmodem 6y agoI've looked at 10 different tools like this, but this doesn't fall well enough into the definition i'm using of "standard tools," by which I mean something installable from apt/yum/ports on a wide variety of systems. The closest I've found is using openssl's aes modes, but that requires the IV to be stored out-of-band somehow which is a do-able but a hassle I was hoping to avoid.