{"type":"rich","version":"1.0","author_name":"npub1m230cem2yh3mtdzkg32qhj73uytgkyg5ylxsu083n3tpjnajxx4qqa2np2","author_url":"https://nostr.ae/npub1m230cem2yh3mtdzkg32qhj73uytgkyg5ylxsu083n3tpjnajxx4qqa2np2","provider_name":"njump","provider_url":"https://nostr.ae","html":"📅 Original date posted:2014-05-22\n📝 Original message:-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nI've got a PGP smart card reader and card with a securely generated key and pin entered per signature.\n\nRe: multisig, that's precisely why we want more than just a single maintainer signing commits.\n\nPGP isn't perfect, but perfect is the enemy of good.\n\n\nOn 22 May 2014 21:06:10 GMT+03:00, Jeff Garzik \u003cjgarzik at bitpay.com\u003e wrote:\n\u003eRelated:  Current multi-sig wallet technology being rolled out now,\n\u003ewith 2FA and other fancy doodads, is now arguably more secure than my\n\u003ePGP keyring.  My PGP keyring is, to draw an analogy, a non-multisig\n\u003ewallet (set of keys), with all the associated theft/data\n\u003edestruction/backup risks.\n\u003e\n\u003eThe more improvements I see in bitcoin wallets, the more antiquated my\n\u003ePGP keyring appears.  Zero concept of multisig.  The PGP keyring\n\u003ecompromise process is rarely exercised.  2FA is lacking.  At least\n\u003eoffline signing works well. Mostly.\n-----BEGIN PGP SIGNATURE-----\nVersion: APG v1.1.1\n\niQFQBAEBCAA6BQJTfpWNMxxQZXRlciBUb2RkIChsb3cgc2VjdXJpdHkga2V5KSA8\ncGV0ZUBwZXRlcnRvZGQub3JnPgAKCRAZnIM7qOfwhfVGB/448B6UvhN7bmFQxmLS\n9+wlhWGYioJKUPspz2Wtk0p8v1y1XlDt0UxC+5ODin4a/Zk0+0x4G4MWyaUP1TnA\nWq9FquY3MwTXDrwWzmeQR4QcRbC+EMMk6kXswzT4d/2clUwB1pLl2MYGnS9DjUK2\nof0kzZEbaQvxSKcFmvuqhz0QqGy84pkHAFBHfopS1j4WqIZpelUMzBGRYP8D1IQd\nH/M2YxdQ7T8peiNigqWSyllchKqGoLG+KEr3mvTYRLkxoYw5XTcFyc5AmuTRfzEC\nyhRc7CJwTZjHYahgZRPGJQM0qeopdIVAifCu9NoPgdkyuQL+X8XSidrU5Kbv/YeZ\nScv/\n=GdA4\n-----END PGP SIGNATURE-----"}