> This is great in the usual case, which is the enlightened hacker with their well-known identity key exported to public keyservers It’s great if you are doing

> This is great in the usual case, which is the enlightened hacker with their well-known identity key exported to public keyservers It’s great if you are doing exactly what the original GPG code wanted you to do. If you want to deviate in any way, it’s almost malicious. Want to use an airgapped or otherwise highly secure system to export a copy of a private key to a card? You had better back up your keyring first because the export operation is destructive! Want to verify a signature against a specific public key stored in a file? Prepare for a world of pain as you try to figure out how to get the thing into your keyring and verify against the correct key! As far as I’m concerned, about the best thing that can be said about PGP is that it’s better than other tools that were available when it was written. Other than that, it’s really quite bad.