10 ms·
GPG-Tui, a Terminal User Interface for GnuPG
- kingo55 5y agoThe poor UX behind gpg dissuaded me (and likely many others) from using it. Love the tree layout that's used here... time to get back into gpg.
- JasonFruit 5y agoI really don't get this attitude, though I think it must be valid, since I seem to be almost alone in disagreement. I use plain old GPG for a lot of purposes, and I don't find its command-line usage difficult at all. Key management, encryption, decryption, signing — all of these operations are pretty straightforward. What specific tasks have you found difficult?
- deleted 5y ago[deleted]
- sneak 5y agoIt's very hard to simply encrypt a file to a given pubkey (due to the key trust model) compared to, for example, something like age (where it's just `age -r $PUBKEY`). You also have to set GNUPGHOME somewhere and import the key first, you can't easily do it statelessly without tracking mud into the filesystem first.
- KirillPanov 5y agoI agree that age is a huge improvement over PGP, and the rightful heir to its throne. However most people complaining about PGP's UI go on to explain that this is why you should use Telegram or WhatsApp. That line of reasoning is just bogus.
- creamytaco 5y agoHuge improvement? It doesn't even come close. It's yet another half-assed reimplementation of the easiest PGP features to reimplement. There is no web of trust, no smartcard support, not even signing. Which is why age has gone nowhere, and pretty much everyone keeps using PGP.
- yrro 5y agogpg has had a --recipient-file option for a while now... no need to import it.
- user3939382 5y agoI get requests from non-technical people in my life for how they can email sensitive files (to other non-technical users) in a way that is especially secure. My refrain: “Technically there is, but… (contemplates PGP for half a second)… it’s very complicated to setup.” Between email phishing attacks, Dropbox and everyone else on HIBP, I honestly don’t know what advice to give non-technical users besides put it on a USB drive and drop it off. I can think of security pitfalls with literally any other file transmission technology that is easily accessible to non-technical users. If anyone has a suggestion I’m all ears.
- cpach 5y agoSignal (on desktop or smartphone) or https://webwormhole.io/ https://webwormhole.io/
- throwaway45209 5y agoFor webwormhole.io, it's server is a weak spot: https://news.ycombinator.com/item?id=23024833 https://news.ycombinator.com/item?id=23024833
- cpach 5y agoGood point.
- cpach 5y agoSignal
- KirillPanov 5y ago(r)age https://news.ycombinator.com/item?id=21895671 https://news.ycombinator.com/item?id=21895671 https://github.com/str4d/rage https://github.com/str4d/rage
- upofadown 5y agoThe thing where you have to deal with raw keys? For non-technical people? * https://articles.59.ca/doku.php?id=pgpfan:agevspgp https://articles.59.ca/doku.php?id=pgpfan:agevspgp
- spicybright 5y agoEh. Still think we need a decent GUI version that integrates with things seamlessly. Like a password manager does.
- fragileone 5y agoIt's virtually seamless now that it's native in Thunderbird.
- beermonster 5y agoI never had an issue using Engimail but so nice it’s native - though haven’t tried it out myself (note to self, go have a play !). They did have this issue recently (ouch) https://www.theregister.com/2021/05/24/mozilla_thunderbird_openpgp_plaintext_keys/ https://www.theregister.com/2021/05/24/mozilla_thunderbird_o...
- Avamander 5y agoVirtually seamless in things such as Protonmail or Thunderbird. It gets more complex if you want to use hardware key storage, as one should with GPG. The setup is 90% of the pain, awful defaults, terribly discoverable documentation.
- jitl 5y agoWhile this is awesome work, it seems pointless since the protocol and ecosystem around it is so hopelessly convoluted, misunderstood, and in a varying state of abandonment. All my friends in the security steer well clear of it.
- young_unixer 5y agoWhat do they use instead?
- doomrobo 5y agoStandard replacements: For signing: signify/minisign For encryption: age For file transfer: magic wormhole For encrypted messaging: Signal (or your choice of e2e encrypted messaging platform)
- ekianjo 5y agoSignal is centralized and in no way can replace emails.
- tptacek 5y agoEmail is default plaintext, can't force encryption on groups, leaks --- in fact, gleefully publishes --- the most important dragnet surveillance metadata (even when ostensibly encrypted), creates long term archives of secrets, is built on long term secrets, and, to boot, is in the real world itself effectively centralized. It's hard to even imagine a secure messaging system less safe than email. Recommending encrypted email is simply malpractice.
- ekianjo 5y agoRecommending signal fails to realize that it can be compromised in many ways precisely because it is centralized. A false sense of security.
- aborsy 5y agoIt’s straightforward to use GPG via command line. I don’t find its CLI more complex than, say, SSH’s. I use it daily (with secret keys on a hardware key) for passwords, back up, file encryption, some email (admittedly most recipients don’t use encryption), software verification etc. Newer tools are simpler, but GPG is also workable.
- stingraycharles 5y agoFor me the problem is that I use ssh way more often, so it’s easier to remember all the commands. I need to encrypt/decrypt something with GPG only a few times a year, and every time I struggle remembering the commands to do so.
- forgotpwd16 5y agogpg --help provides an one line description of necessary commands. And ecrypt/decrypt is just `gpg --encrypt/decrypt`. You don't even have to specify an output file. Encrypt automatically creates a new file and decrypt outputs result in console so to put it new file a redirection is enough.
- cpach 5y agoAs pointed out elsewhere in these threads there are now much better alternatives available. It’s time for PGP to retire.
- Siira 5y agoWhat are these better tools?
- cpach 5y agohttps://news.ycombinator.com/item?id=27331942 https://news.ycombinator.com/item?id=27331942
- creamytaco 5y ago
- d0mine 5y agoMy interface to gpg is just to append .gpg to a file extension in Emacs that is all, the rest is handled automatically: it will ask for passphrase/present keys, etc.
- alwillis 5y agoI can't believe it took this long to bring a good TUI to GPG after all of these years. Well done.
- atroche 5y agoWow, excellent work. Love how much effort has gone into the readme. There was definitely a gap here and you filled it :)
- andrewshadura 5y agoThis should have been based on Sequoia instead of GPGME.
- cassepipe 5y agoI see that sequoia has sq, a command line utility but it says it is stateless which IIUC means that it does not store keys. I would like to use it but not quite sure how. Any recommandation ?