PGP sucks in general. But it seems to be the only thing in it's own space. When will there be a viable alternative to it? age doesn't support signing, keys are

PGP sucks in general. But it seems to be the only thing in it's own space. When will there be a viable alternative to it? age doesn't support signing, keys are meant to be ephemeral. minisign/signify are not a suitable equivalent and are more suited to signing+verifying software releases.