Viewing profile — Leace

> Which is why most distributions and other projects has moved to WKDs for key discovery. Yeah, WKD is a first-class citizen in GnuPG. Creating signatures with "--sender $EMAIL" em…

You may be interested in https://indieauth.com/pgp

On first sight this looks interesting but Keybase is years ahead in the UX polish. E.g. on Keybase it's easy to see and add new proofs without a CS degree.

Allow self-signed certs and build reputation as usual. This would still require effort from indie devs to build reputation but as soon as more people start using your app the dialo…

Germany already experimented with a couple of hosted open services: https://www.golem.de/news/whatsapp-matrix-oder-xmpp-bmi-such... The Conversations.im team also leaves in Germany…

For the record there are quite a few new algos in GPG, most notably ed25519. While RSA 7680 offers 192 bits of security [0] ed25519 on the other hand is offering 128 bits of securi…

> In general I'm not sure how the YubiKey stores keys and till now I had no idea you can backup YubiKey Well, actually you can't. You can backup keys if you create them in software…

Err, nope, this is a work-in-progress. What are you especially interested in? Then I can provide you with details. Some random links I used: - https://btrfs.wiki.kernel.org/index.p…

> Maybe write down my master password and put it in a safe? Isn't this just moving the goalpost because what if you forget safe combination?

> Without compromising your security - I'd love to know how others approach their personal IT security challenges? Most of my security is based on OpenPGP keys stored on a Yubikey.…

There is no separation of "us" vs "them" and if for your own benefit everyone should be satisfied. See also "Think win-win" from 7 habits: https://en.wikipedia.org/wiki/The_7_Habit…

It's still a thing for people that started using it when it was the latest Google chat product. It may be surprising but people just want stable chat experience not chasing whateve…

> We do not allow anonymous users (i.e., without a Google Account) to join meetings created by individual accounts. This quote from the linked post would suggest otherwise.

Yeah... I guess a little bit it does. Keybase offers an alternative to Web of Trust that kernel.org itself uses ( https://www.kernel.org/doc/wot/ ). Keybase solution is having mult…

> It was a fun little giveaway experiment funded by someone else, in the spirit of the company's focus on cryptography. It was not "someone else". Keybase is directly funded by Ste…

To be honest even PGP signing has some issues: it's not clear what does it mean to sign a commit and there is plenty of misuse of that (see [0], `git push --signed` solves some of …

> Personally keybase is the only project that may provide some form of alternative, but they do so by supporting pgp. Why keybase? Reading their crypto page ( https://keybase.io/bl…

Interesting pattern, first time I saw this: switch (true) { case cellA > cellB: return 1; case cellA Source: https://htmldom.dev/sort-a-table-by-clicking-its-headers

> I still use RSA mainly because Yubikey doesn't support them yet with OpenPGP keys.. I felt the increase in security usage was a worthy compromise to using RSA with a key length t…

This is nice if you don't have a GitHub account. Otherwise you can watch the repository with "releases only" option and it will send you e-mail notifications.

What jurgemaister said. If you don't have another trust mechanism (like Web of Trust) to validate if this is a correct key then HTTPS gives at least some assurance that no intermed…

Very nice writeup! It contains a link to Avast's Coordinated Vuln Disclosure site: https://www.avast.com/coordinated-vulnerability-disclosure and this has a link to Avast PGP key t…

I'm using Dino daily and it works well and looks modern. It still has minor issues here and there but it's finally a desktop client I can recommend to my non-technical friends. One…