3 ms·
> Not only can it do all the ssh-agent operations It can not. Doesn't work with PKCS#11 PIV. In general GPG's behavior with SmartCards is idiotic and interfere
by Avamander 11mo ago
> Not only can it do all the ssh-agent operations
It can not. Doesn't work with PKCS#11 PIV. In general GPG's behavior with SmartCards is idiotic and interferes with many other applications.
It's good that people don't use GPG more often and I can just purge it from my systems.
- johnisgood 11mo agoWhat do you mean? I use GPG with SSH (or SSH with GPG) all the time, and I need gpg-agent for that. GPG's agent replaces ssh-agent and serves SSH keys derived from your GPG key. Can you do this with Age? If not, then I am going to stick to GPG.
- Avamander 11mo agoI'm unsure what was unclear. It simply does not provide PIV support and it interferes with other software that wants to utilise SmartCards. Can Age interfere with all SmartCard usage? No clue.
- johnisgood 11mo agoOh well, let us just agree on that comparing Age to GPG is silly, ergo "Switching from GPG to Age" is silly, unless it is "Switching from GPG to Age for file encryption". Age doesn't do signing, key infrastructure, or email. Minisign/signify only sign. None are GPG replacements. They're partial feature subsets that are simpler because they do less. So, to summarize these tools: - Age: Only does file encryption, no signing, no key management infrastructure, no email integration - Minisign/Signify: Only signing, no encryption - GPG: Encryption, signing, key management, email integration, multiple recipients, subkeys, revocation certificates, web of trust (even if unused), smart card support, etc. You cannot just simply switch from GPG to Age unless you are only doing file encryption. If this is the case, then sure, you can.