2026-07-27T06:52:49Z https://nostr.ae Heiko https://nostr.ae/npub1ugfndvc4sm235uplmzphh6vv7vujg4438vmzkzv4zxs4hv2laj3q5fhya8 https://cdn.masto.host/floss/accounts/avatars/114/414/637/197/353/749/original/c3d84454ebbe5d9f.jpg https://cdn.masto.host/floss/accounts/avatars/114/414/637/197/353/749/original/c3d84454ebbe5d9f.jpg https://nostr.ae/nevent1qqsvqdhz7mppr68dymmrdyplvqh873puc9h53r0vdlwxq48w6u946hgzyr3pxd4nzkrd2xns8lvgx7lf3nenjfzkkyanv2cfj5g6zka3tlk2ymcuflm In reply to <a href='/nevent1qqsvg4ury4kunc938rghsfq3aczru4n4gn598fpmt3japseweuuaf9ge2wyzf'>nevent1q…wyzf</a><br/>_________________________<br/><br/>AC is traditionally extremely uncommon in private spaces in Germany (and much of Europe i assume).<br/>It seems clear that this will change rapidly over the next few years. 2026-06-29T12:11:44Z https://nostr.ae/nevent1qqsylugssgf3vqnrcwwvgnyfmspc2gyys9a3f6kys8kpdp8s0vhhk7szyr3pxd4nzkrd2xns8lvgx7lf3nenjfzkkyanv2cfj5g6zka3tlk2y2hnzk5 The <a href="https://openpgp.org/">https://openpgp.org/</a> website has gotten a makeover, and is currently celebrating 35 years of PGP:<br/><br/>The original PGP 1.0 was released on June 5th, 1991.<br/><br/>(Version 1.x of PGP lost relevance quickly - it used a symmetric cipher that did not withstand even mild scrutiny.<br/>The updated version 2.x series came out in 1992 and rectified this issue.) 2026-06-08T20:12:12Z https://nostr.ae/nevent1qqs0wqeyav4xv9793ct4x5s9yped9hhtachgslt5d46dqvqd53x6ayszyr3pxd4nzkrd2xns8lvgx7lf3nenjfzkkyanv2cfj5g6zka3tlk2ykh6uvd In reply to <a href='/nevent1qqs2vhgwtw3rhetk4079pljr0jh9uymlrhje3dqu8k3g58lj0u0an7gfacfak'>nevent1q…cfak</a><br/>_________________________<br/><br/>There is of course a human layer of &#34;drama&#34; to this. And man, am I tired of that as well.<br/><br/>But more urgently, this divergence will impact users of OpenPGP negatively - and there is no obvious straightforward solution that I can see. I&#39;m personally much more interested in how to mitigate this issue, than the &#34;drama&#34; side of it.<br/><br/>My sense is that raising the divergence more publicly is one element of a potential solution. 2026-05-30T14:05:19Z https://nostr.ae/nevent1qqsq8vsusucrk7vhzfasjtfpxh6rraa27q3c66dxlt40z56whgx5j8gzyr3pxd4nzkrd2xns8lvgx7lf3nenjfzkkyanv2cfj5g6zka3tlk2yg6fmwg Last week, <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1nen0kdtnu007w7vgk5za9q58hd7336tydcv8hmnn7q8ea5uzczmqr6n3ve" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>LWN.net</span> (<span class="italic">npub1nen…n3ve</span>)</a></span> published an article about the recent tenth OpenPGP email summit, co-written by <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1nd6y7fxzzff3k77e37tjq78yudrz8680r5lvc53z8tc5r4yldsgswtt277" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Andrew Gallagher</span> (<span class="italic">npub1nd6…t277</span>)</a></span>, <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1f967p8r48x972c6kryq7p65r8h8z02e8z2zznget5vvl3hgtjy6s0ufp0d" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>David Runge</span> (<span class="italic">npub1f96…fp0d</span>)</a></span> and me.<br/><br/>As of today, the article is public for non-subscribers:<br/><br/><a href="https://lwn.net/Articles/1072870/">https://lwn.net/Articles/1072870/</a><br/><br/>It contains a high-level overview of some recent developments in the #OpenPGP ecosystem, including PQC migrations, the new &#34;unobtrusive signatures&#34; draft for ubiquitous email signing, the Autocrypt v2 draft for ratcheting encryption key rotation, and more. 2026-05-28T10:08:59Z https://nostr.ae/nevent1qqs0y5qzcpx703l07amexdqe0rmmsexwyagelclcsjakqr6tccrlmdszyr3pxd4nzkrd2xns8lvgx7lf3nenjfzkkyanv2cfj5g6zka3tlk2yx9zx4r Regular PSA reminder:<br/><br/>While GnuPG 2.5.x implements hybrid PQC encryption based on ML-KEM, just like <a href="https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/">https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/</a>, GnuPG&#39;s implementation is entirely incompatible with the IETF-specified format, which all other libraries are implementing.<br/>Both serialization and the KEM combiners differ.<br/><br/>The bottom line is that anyone who wants to use vendor-agnostic PQC with OpenPGP should *avoid GnuPG&#39;s PQC key formats*.<br/><br/>This is all exceedingly unfortunate and weird, and frankly, a total disgrace. 2026-04-24T12:13:13Z https://nostr.ae/nevent1qqsdyz2vvxxzqacgmd9d6647cwwlm5tccsnkz6cjj6drvhd2kf82vkgzyr3pxd4nzkrd2xns8lvgx7lf3nenjfzkkyanv2cfj5g6zka3tlk2yhgtksl The openpgp-card-state crate now has a new &#34;ephemeral&#34; backend:<br/><br/><a href="https://codeberg.org/openpgp-card/state/#ephemeral-interactive-input-with-persistence-and-expiry">https://codeberg.org/openpgp-card/state/#ephemeral-interactive-input-with-persistence-and-expiry</a><br/><br/>This combines the defensiveness of unpersisted pinentry with the convenience of caching (in the Linux kernel credential store, for a configurable duration).<br/><br/>New releases of <a href="https://crates.io/crates/openpgp-card-tool-git">https://crates.io/crates/openpgp-card-tool-git</a>, <a href="https://crates.io/crates/openpgp-card-ssh-agent">https://crates.io/crates/openpgp-card-ssh-agent</a>, <a href="https://crates.io/crates/rsop-oct">https://crates.io/crates/rsop-oct</a> support this new #OpenPGP card PIN storage backend.<br/><br/>Many thanks to <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1r32n28z7wntu9yyyr9664pwcjnhvz7slsany8wt0z2zcy3pf6qssd9uqqj" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>classabbyamp</span> (<span class="italic">npub1r32…uqqj</span>)</a></span> who implemented this new PIN handling mechanism in openpgp-card-state. 2026-03-19T17:36:59Z https://nostr.ae/nevent1qqsx9xfwr7uzfpnhjfee4urc5dn0fdghrap2ry2lykn6j3tu3x4n7jgzyr3pxd4nzkrd2xns8lvgx7lf3nenjfzkkyanv2cfj5g6zka3tlk2yeujttg In reply to <a href='/nevent1qqs20v4mls6dqqmql3fudlpp6hw4jjmht2m400kselr3ftv80uw4mns607xv0'>nevent1q…7xv0</a><br/>_________________________<br/><br/>I&#39;m also keeping my fingers crossed for good progress on the servo front.<br/><br/>In the meantime, I just learned that Fedora doesn&#39;t currently package librewolf, so <a href="https://en.wikipedia.org/wiki/GNU_IceCat">https://en.wikipedia.org/wiki/GNU_IceCat</a> is the most available side-stepping option in Fedora-land.<br/><br/>A brief web search didn&#39;t give me a clear impression how those two forks compare. Maybe someone here has insights? 2025-11-18T12:49:04Z https://nostr.ae/nevent1qqsvdmzjs2rvvjhjtlrj3a57cza433q7zlsfdycsu4ywftfxchxmhdqzyr3pxd4nzkrd2xns8lvgx7lf3nenjfzkkyanv2cfj5g6zka3tlk2y53d39n In reply to <a href='/nevent1qqs0gmtvrgeuav0su5ge4n0l62mp2063qfzc8h6m253fc8z3sausrhgqdfxru'>nevent1q…fxru</a><br/>_________________________<br/><br/>&#34;(Which, honestly, isn&#39;t very fair, since I&#39;m not ICE.)&#34;<br/><br/>lol 2025-09-08T11:22:35Z https://nostr.ae/nevent1qqsv6t6ygv3ttdaeclqzfqezeca9gtp47ds9qqgwvd69p2gzh4h2adgzyr3pxd4nzkrd2xns8lvgx7lf3nenjfzkkyanv2cfj5g6zka3tlk2yq6d2y2 In reply to <a href='/nevent1qqs8ee462q5eu0augz7mnq54zw2yhsctpld3vuu3u9ltkzx0lumwxas5vmeyl'>nevent1q…meyl</a><br/>_________________________<br/><br/>what services do you want to authenticate against?<br/><br/>The onlykey is unfortunately not following the OpenPGP card specification, but instead its pgp functionality is tightly coupled with the GnuPG software.<br/>So that device sadly won&#39;t work with the oct family of tools. 2025-08-15T20:03:08Z https://nostr.ae/nevent1qqsx0d49xhry78a9ptjgvx365ff57jpsncfmetsm2qrnzrgpnzxtw9szyr3pxd4nzkrd2xns8lvgx7lf3nenjfzkkyanv2cfj5g6zka3tlk2y4aq0pp In reply to <a href='/nevent1qqs2u6hht22z98u0ssv02rh5dnver6kzg3nr83un382xvetq7x4jxrcgwg24k'>nevent1q…g24k</a><br/>_________________________<br/><br/>I&#39;ll try to take a serious look and think sometime next week!<br/><br/>In the meantime, I&#39;m excited to see you experiment. That in itself feels like a great success for these tools - inviting and enabling experimentation ☺️ 2025-08-03T18:36:56Z https://nostr.ae/nevent1qqsxg2lq076ms8jcudt4t23m78adafw4nfure8pnmj8p07hm8uqvr9szyr3pxd4nzkrd2xns8lvgx7lf3nenjfzkkyanv2cfj5g6zka3tlk2yqlnhzq In reply to <a href='/nevent1qqsvwh387juw4xftvyrqnmlzy3q5n43nwegsuuqskwwe5twyte40jkszddrpg'>nevent1q…drpg</a><br/>_________________________<br/><br/>I just saw the notification email! 2025-08-03T18:31:25Z https://nostr.ae/nevent1qqsrlyjnqy0myszxy76jgd27xyw4nhlhcq469frj7fsp6yk6mwdh4kqzyr3pxd4nzkrd2xns8lvgx7lf3nenjfzkkyanv2cfj5g6zka3tlk2ygewtyr In reply to <a href='/nevent1qqs8kntkav5wykfzzfa9dgs6tp2x5jpfs3xpptg6lw9fmg04dwmh05qc557a5'>nevent1q…57a5</a><br/>_________________________<br/><br/>very cool to hear of successful FreeBSD usage of both tools! 🥳 2025-06-28T17:11:56Z https://nostr.ae/nevent1qqs23ktfy6unlww7zhr7r60xqr5sphtefa43nfejh5njzehm0rz38tczyr3pxd4nzkrd2xns8lvgx7lf3nenjfzkkyanv2cfj5g6zka3tlk2yaxpcum I&#39;m launching a new site about #OpenPGP:<br/><br/><a href="https://openpgp.foo/">https://openpgp.foo/</a><br/><br/>This site is a personal writing project with a focus on learning OpenPGP&#39;s concepts by playful hands-on use.<br/><br/>My goal is to empower readers to make sense of more advanced material (including <a href="https://openpgp.dev/">https://openpgp.dev/</a>), and become proficient in whatever subset of OpenPGP they are interested in.<br/><br/>The site is far from complete, I hope to continue writing on it. Let me know what you think, and what additional content you&#39;d like to see! 2025-05-19T01:32:22Z