,
5 tweets,
2 min read
Read on Twitter
Alright Twitter, it’s time to #killgpg. If you use gpg to encrypt files, tell me how and what features you need.
Do you care about signatures? Streaming? Do you pipe tar into it? Do you need seeking? CLI or libraries? Big or small files?
Do you care about signatures? Streaming? Do you pipe tar into it? Do you need seeking? CLI or libraries? Big or small files?
Today we’re going after encryption, not signing. Signing is not a tooling problem but a trust problem, and to the extent it is, it’s mostly covered by signify.
Emails are also out of scope. Again, a trust and medium problem. (Which OpenPGP does not solve.)
Emails are also out of scope. Again, a trust and medium problem. (Which OpenPGP does not solve.)
I’m hearing a lot of passwordstore.org, and that’s my own last use case for it! So the new tool will definitely work as a pass backend, and support YubiKeys through the PIV applet.
Here's a design by @Benjojo12 and I for "age" — a simple, secure and modern encryption tool with small explicit keys, SSH key support, no config options, and UNIX-style composability.
docs.google.com/document/d/11y…
docs.google.com/document/d/11y…
A couple rewrites later, I am pretty satisfied with the "age" design, enough to start implementing it.
docs.google.com/document/d/11y…
($50 to a charity of your choice if you find an issue or make a suggestion that leads to a changelog entry before the implementation is out.)
docs.google.com/document/d/11y…
($50 to a charity of your choice if you find an issue or make a suggestion that leads to a changelog entry before the implementation is out.)
