c/opensource@lemmy.ml · uszo165@futurology.today · 22 Sep 2026 14:03

The gpg.fail aftermath: On responsible disclosure, GPG, and the state of security in 2026

The gpg.fail aftermath: On responsible disclosure, GPG, and the state of security in 2026 In 2025, I found and disclosed a bunch of vulnerabilities in GPG, the most used PGP implementation, and held a talk at 39c3 about it. **S...

check post at origin

log in to comment.

comments

top new hot controversial

‹ show full thread

@ikogarane@lemmy.world · 2d ago

GnuPG is one of those tools I never got around to use. How could something designed for human communication be so utterly cumbersome and confusing ?

14

link
- @isVeryLoud@lemmy.ca · 1d ago
  
  I use it for git commit signing.
  
  1
  
  link
  - @ikogarane@lemmy.world · 1d ago · edited
    You can now use SSH keys if you so wish.
    
    docs.gitlab.com/user/project/repository/…/ssh/
    
    docs.github.com/…/about-commit-signature-verifica…
    2
    
    link
- @diaphragmwp@discuss.tchncs.de · 1d ago
  
  If you ignore most of it, it’s actually fine.
  
  0
  
  link