I'm still think that OpenPGP is the best solution for the first two. But the two tools at the top have the same problems as pgp. How do you trust some key mate

I'm still think that OpenPGP is the best solution for the first two. But the two tools at the top have the same problems as pgp. How do you trust some key material. The WoT is a complete failure, but modern solutions like WKD are amazing and make PGP just plain work. The one nice thing about age is the ability to encrypt to a GitHub users key. However, even that is possible with OpenPGP. Here is a tool that I made ~7 years ago that does something similar: https://github.com/georgyo/sshcrypt https://github.com/georgyo/sshcrypt Another thing minisign/age don't have is a method to say that a key is compromised. I don't think the solution to the problems with OpenPGP is too just ignore the problems and switch to using bare keys like new tools are doing.