Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

ssh or minisign for signing age for file encryption




There are people who use GPG for more than that. Those that are fine with just those two features, sure. Heck, you can encrypt with "openssh", no need for age. :D I have a bash function for encryption and decryption!

Those people should perhaps ponder if it’s a reasonable thing to insist on using this broken standard/tool in 2025.

Yeah, well, I wish I could convince people to use 2-4 different tools when one does it "just fine".

I thought the whole unix philosophy was to have a bunch of tools that each do one thing well, and to compose them into the workflow you want.

And I thought most projects would be licensed as GNU by now but alas.

The gpg.fail page mentions minisign vulns too.

The minisign ones are much weaker though? "just" display of data, one of them not even through minisign itself.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: