As 2021 begins, I'm changing to a new OpenPGP certificate.
I did a similar transition two years ago, and a fair amount has changed since then.
You might know my old OpenPGP certificate as:
pub ed25519 2019-01-19 [C] [expires: 2021-01-18]
C4BC2DDB38CCE96485EBE9C2F20691179038E5C6
uid Daniel Kahn …What are the risks and potential benefits of contact-tracing?
I recently announced the publication of Web Key Directory for
@debian.org e-mail addresses. This blog post
announces another way to fetch OpenPGP certificates for @debian.org
e-mail addresses, this time using only the DNS. These two mechanisms
are complementary, not in competition. We want …
You can now fetch the OpenPGP certificate for any Debian developer who
uses an @debian.org e-mail address using Web Key
Directory
(WKD).
With modern GnuPG, if you're interested in the OpenPGP certificate for
dkg just do:
gpg --locate-keys dkg@debian.org
By default, this …
I wrote yesterday about a recent OpenPGP certificate flooding attack, what I think it means for the ecosystem, and how it impacted me. This is a brief followup, trying to zoom out a bit and think about why it affected me emotionally the way …
My public cryptographic identity has been spammed to the point where it is unusable in standard workflows. This blogpost talks about what happened, what I'm doing about it, and what it means for the broader ecosystem.
If you work with me and you use OpenPGP certificates to …
I've scrapped my first try at a new OpenPGP certificate for 2019 (the one I published yesterday). See the history discussion at the bottom of this post for details. This blogpost has been updated to reflect my revised attempt.
My old OpenPGP certificate will …
In my work at the ACLU, we fight for civil rights and civil liberties. This includes the ability to communicate privately, free from surveillance or censorship, and to control your own information. These are principles that I think most free software developers would agree with. In that vein, we just …
Analysis of usability and mechanics of cryptographic protection in e-mail
The GNU Privacy Guard (GnuPG) upstream team maintains three branches of development: 1.4 ("classic"), 2.0 ("stable"), and 2.1 ("modern").
They differ in various ways: software architecture, supported algorithms, network transport mechanisms, protocol versions, development activity, co-installability, etc.
Debian currently ships two versions of GnuPG in every maintained …
Page 1 / 13 »