Le Pouls Du Monde

JP MensFor years now I’ve had a bit of a bee under my cap: would it be possible to unlock a Vault file with a GnuPG-compatible smart card? And what if the smart card were local and the unlocking had to be triggered remotely?Forwarding GnuPG agent over SSH<a href="https://jpmens.net/2025/04/04/forwarding-gnupg-agent-over-ssh/" rel="nofollow noopener" translate="no" target="_blank">https://jpmens.net/2025/04/04/forwarding-gnupg-agent-over-ssh/</a><a href="https://mastodon.social/tags/gpg" class="mention hashtag" rel="nofollow noopener" target="_blank">#gpg</a> <a href="https://mastodon.social/tags/ansible" class="mention hashtag" rel="nofollow noopener" target="_blank">#ansible</a>Edit: I have amended the sentence regarding distinct machines. Works fine on two different Linux boxes.

JP MensOverriding GnuPG's PIN entry<a href="https://jpmens.net/2025/04/04/overriding-gnupg-s-pin-entry/" rel="nofollow noopener" translate="no" target="_blank">https://jpmens.net/2025/04/04/overriding-gnupg-s-pin-entry/</a><a href="https://mastodon.social/tags/gpg" class="mention hashtag" rel="nofollow noopener" target="_blank">#gpg</a>

Preston Maness ☭<a href="https://mastodon.ml/@Xeniax" class="u-url mention" rel="nofollow noopener" target="_blank">@Xeniax</a> Totally nerdsniped :D I'd love to be a part of the study.I don't think that <a href="https://tenforward.social/tags/KeyServers" class="mention hashtag" rel="nofollow noopener" target="_blank">#KeyServers</a> are dead. I think they evolved into Verifying Key Servers (VKS), like the one run by a few folks from the OpenPGP ecosystem at <a href="https://keys.openpgp.org/about" rel="nofollow noopener" translate="no" target="_blank">https://keys.openpgp.org/about</a> . More generally, I believe that <a href="https://tenforward.social/tags/PGP" class="mention hashtag" rel="nofollow noopener" target="_blank">#PGP</a> / <a href="https://tenforward.social/tags/GPG" class="mention hashtag" rel="nofollow noopener" target="_blank">#GPG</a> / <a href="https://tenforward.social/tags/OpenPGP" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPGP</a> retains important use-cases where accountability is prioritized, as contrasted with ecosystems (like <a href="https://tenforward.social/tags/Matrix" class="mention hashtag" rel="nofollow noopener" target="_blank">#Matrix</a>, <a href="https://tenforward.social/tags/SignalMessenger" class="mention hashtag" rel="nofollow noopener" target="_blank">#SignalMessenger</a>) where deniability (and Perfect Forward Secrecy generally) is prioritized. Further, PGP can still serve to bootstrap those other ecosystems by way of signature notations (see the <a href="https://tenforward.social/tags/KeyOxide" class="mention hashtag" rel="nofollow noopener" target="_blank">#KeyOxide</a> project).Ultimately, the needs of asynchronous and synchronous cryptographic systems are, at certain design points, mutually exclusive (in my amateur estimation, anyway). I don't think that implies that email encryption is somehow a dead-end or pointless. Email merely, by virtue of being an asynchronous protocol, cannot meaningfully offer PFS (or can it? Some smart people over at crypto.stackexchange.com seem to think there might be papers floating around that can get at it: <a href="https://crypto.stackexchange.com/questions/9268/is-asynchronous-perfect-forward-secrecy-possible" rel="nofollow noopener" translate="no" target="_blank">https://crypto.stackexchange.com/questions/9268/is-asynchronous-perfect-forward-secrecy-possible</a>).To me, the killer feature of PGP is actually not encryption per se. It's certification, signatures, and authentication/authorization. I'm more concerned with "so-and-so definitely said/attested to this" than "i need to keep what so-and-so said strictly private/confidential forever and ever." What smaller countries like Croatia have done with <a href="https://tenforward.social/tags/PKI" class="mention hashtag" rel="nofollow noopener" target="_blank">#PKI</a> leaves me green with envy.

Nonilex“Unless you are using <a href="https://masto.ai/tags/GPG" class="mention hashtag" rel="nofollow noopener" target="_blank">#GPG</a>, email is not end-to-end encrypted, & the contents of a message can be intercepted & read at many points, including on Google’s email servers,” said Eva Galperin, director of <a href="https://masto.ai/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> at the Electronic Frontier Foundation.  <a href="https://masto.ai/tags/NationalSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#NationalSecurity</a> experts have expressed alarm over the <a href="https://masto.ai/tags/Trump" class="mention hashtag" rel="nofollow noopener" target="_blank">#Trump</a> admin’s denial that the leaked <a href="https://masto.ai/tags/Signal" class="mention hashtag" rel="nofollow noopener" target="_blank">#Signal</a> chat contained <a href="https://masto.ai/tags/classified" class="mention hashtag" rel="nofollow noopener" target="_blank">#classified</a> information.<a href="https://masto.ai/tags/Gmail" class="mention hashtag" rel="nofollow noopener" target="_blank">#Gmail</a> <a href="https://masto.ai/tags/Signalgate" class="mention hashtag" rel="nofollow noopener" target="_blank">#Signalgate</a> <a href="https://masto.ai/tags/Signal" class="mention hashtag" rel="nofollow noopener" target="_blank">#Signal</a> <a href="https://masto.ai/tags/OpSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpSec</a> <a href="https://masto.ai/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> <a href="https://masto.ai/tags/military" class="mention hashtag" rel="nofollow noopener" target="_blank">#military</a> <a href="https://masto.ai/tags/idiocracy" class="mention hashtag" rel="nofollow noopener" target="_blank">#idiocracy</a> <a href="https://masto.ai/tags/kakistocracy" class="mention hashtag" rel="nofollow noopener" target="_blank">#kakistocracy</a>

Recent searches

Search options

Administered by:

Server stats:

#gpg