I'm not an openbsd person, though maybe one day!, but why change to complicated failure-prone tech when you could have something simpler and more secure? https

I'm not an openbsd person, though maybe one day!, but why change to complicated failure-prone tech when you could have something simpler and more secure? https://man.openbsd.org/signify https://man.openbsd.org/signify https://github.com/aperezdc/signify https://github.com/aperezdc/signify I used to use PGP yubikey for everything but the subkey renewal process was so onerous I switched to PIV keys with age and haven't looked back. Never mind all those legacy ciphers in GPG are just attack vectors that haven't happened yet.