uszo165@futurology.today to Open Source@lemmy.mlEnglish · 24 days agoThe gpg.fail aftermath: On responsible disclosure, GPG, and the state of security in 2026media.ccc.deexternal-linkmessage-square6linkfedilinkarrow-up155arrow-down10cross-posted to: cybersecurity@sh.itjust.worksopensource@programming.dev
arrow-up155arrow-down1external-linkThe gpg.fail aftermath: On responsible disclosure, GPG, and the state of security in 2026media.ccc.deuszo165@futurology.today to Open Source@lemmy.mlEnglish · 24 days agomessage-square6linkfedilinkcross-posted to: cybersecurity@sh.itjust.worksopensource@programming.dev
minus-squareikogarane@lemmy.worldlinkfedilinkarrow-up14·23 days agoGnuPG is one of those tools I never got around to use. How could something designed for human communication be so utterly cumbersome and confusing ?
minus-squaresetVeryLoud(true);@lemmy.calinkfedilinkarrow-up2·23 days agoI use it for git commit signing.
minus-squareikogarane@lemmy.worldlinkfedilinkarrow-up4arrow-down1·edit-223 days agoYou can now use SSH keys if you so wish. https://docs.gitlab.com/user/project/repository/signed_commits/ssh/ https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification#ssh-commit-signature-verification
minus-squarediaphragmwp@discuss.tchncs.delinkfedilinkEnglisharrow-up1·23 days agoIf you ignore most of it, it’s actually fine.
GnuPG is one of those tools I never got around to use. How could something designed for human communication be so utterly cumbersome and confusing ?
I use it for git commit signing.
You can now use SSH keys if you so wish.
If you ignore most of it, it’s actually fine.