PApalata·Dec 26, 2024
> if you're "genuinely" asking questions, you might want to be careful about back-loading them with assertions that suggest you already believe you know the answer
I don't know the answers. English is not my language, so I express myself as best as I can. I just re-read my answer above, and what you are saying isn't obvious to me. Not saying you're wrong: most likely you are right. Maybe I should write in my first language and hope that people translate it :-).
I am just saying that it's often worth assuming good faith.
It's not the first time I try to ask when I see criticism of PGP, and I still don't have answers. I am not saying PGP is great: just that I can actually use it with my hardware keys everywhere I need to. When I search for "minisign", I find different repositories from different authors I don't know. Is it better to use PGP
Read the rest
or to use some alternative from the first result given by my search engine?
Some other thoughts (all are things I can currently do with PGP):
* age is written in Go, so I assume it won't work on Android. Are there alternatives that support Android? I haven't found any.
* rage is written in rust. Assuming it is trustworthy (it's not the same author as age), I haven't seen any information about Android.
* The age-plugin-yubikey doesn't seem to work on Android [4]
* It's really not clear to me if minisign works with hardware keys [1][2]. There is an "experimental" fork by Yubico, but it hasn't been updated in a year [3]. Not sure about other hardware keys.
[1]: https://github.com/jedisct1/minisign/issues/100
[2]: https://github.com/jedisct1/minisign/issues/95
[3]: https://github.com/YubicoLabs/minisign-fido/
[4]: https://github.com/str4d/age-plugin-yubikey/issues/109