3 ms·
FYI, gpg is soon considered insecure, even now.
by worldsavior 4y ago
FYI, gpg is soon considered insecure, even now.
- aidenscott2016 4y agoYou can’t make a statement like that without clarifying what you mean and sharing some alternative to gpg
- worldsavior 4y agoIt's less about the algorithm, but more how gpg/pgp is constructed/used. No forward secrecy, leaks info, bad text authentication, and other. Those things maybe can be fixed, but they're not. https://latacora.micro.blog/2019/07/16/the-pgp-problem.html https://latacora.micro.blog/2019/07/16/the-pgp-problem.html Edit: an alternative for file encryption is age, fast simple and secure. Signing is signify.
- tmtvl 4y agoWhat would you recommend, NaCl? Signify?
- worldsavior 4y agoI would recommend using signify. That's what security researchers also recommend. Simple and elegant tool, designed to only signing, unlike gpg which is used for encrypting and signing as well.
- deleted 4y ago[deleted]
- mike-cardwell 4y agolol