TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Towards Sequoia OpenPGP v1.0

83 点作者 nwalfield大约 5 年前

8 条评论

qqii大约 5 年前
Having an alternative implementation to GnuPG is a pretty important. Although many would argue against the use of PGP encryption for many use cases such as email, there are other use cases where PGP&#x27;s ideas have no replacement.<p>For a specific example take signing git commits. Even fossil scm delegates this task to pgp. Personally keybase is the only project that may provide some form of alternative, but they do so by supporting pgp.<p>I definitely agree that PGP was and is no longer the correct tool for every use case as it sort out to be, but I find there are still pockets where PGP has no alternative. I&#x27;d be interested what HN&#x27;s thoughts are on PGP for this specific use case and if there could be an alternative.
评论 #22994747 未加载
评论 #22995115 未加载
评论 #22994650 未加载
评论 #22994944 未加载
评论 #22994696 未加载
saurik大约 5 年前
As someone who has been trying to use this library but haven&#x27;t had the time to finish build integration to cross compile for all of my target platforms, I really wish it weren&#x27;t using nettle, particularly as it is <i>also</i> using openssl :(. Does rust not have useful cryptography libraries yet? Or couldn&#x27;t it <i>just</i> openssl?
superdug大约 5 年前
I still use PGP to encrypt files with secrets in them that I am sending to a known source, and I know it&#x27;s still the base encryption for a few well known file servers. A new player in the market is welcomed.
评论 #22994979 未加载
评论 #22994965 未加载
jolmg大约 5 年前
Here&#x27;s the command line documentation:<p><a href="https:&#x2F;&#x2F;docs.sequoia-pgp.org&#x2F;sq&#x2F;index.html" rel="nofollow">https:&#x2F;&#x2F;docs.sequoia-pgp.org&#x2F;sq&#x2F;index.html</a><p>I have to admit that it looks more digestible than gpg&#x27;s. It seems it&#x27;s still missing a way to manage OpenPGP smartcards like Yubikeys. Also, I can&#x27;t see a way to manage an arbitrary set of subkeys for a given primary key.<p>I&#x27;m really happy to see an alternative to GnuPG, though. This looks promising.
longtermd大约 5 年前
Off topic af: what does the picture on their landing page symbolize? <a href="https:&#x2F;&#x2F;sequoia-pgp.org&#x2F;" rel="nofollow">https:&#x2F;&#x2F;sequoia-pgp.org&#x2F;</a>
评论 #22994654 未加载
pgt大约 5 年前
Note that this project is unrelated to Sequoia Capital.
评论 #22994969 未加载
评论 #22994477 未加载
mratsim大约 5 年前
What&#x27;s the threat model?<p>I&#x27;ve looked into the code. It uses Nettle&#x27;s Curve25519 which seems to be implemented constant-time (assuming ECC mul is using &quot;ecc-mul-g&quot; from which is protected against cache timing attacks because the other ecc-mul implementations are using raw table access.)
cpach大约 5 年前
IMO, encrypted e-mail is a dead end. Latacora has a good blog post about it that I highly recommend: <a href="https:&#x2F;&#x2F;latacora.micro.blog&#x2F;2020&#x2F;02&#x2F;19&#x2F;stop-using-encrypted.html" rel="nofollow">https:&#x2F;&#x2F;latacora.micro.blog&#x2F;2020&#x2F;02&#x2F;19&#x2F;stop-using-encrypted....</a>
评论 #22994541 未加载
评论 #22994524 未加载
评论 #22994535 未加载
评论 #22995481 未加载
评论 #22994554 未加载