#PGP > #C2PA

#Gpg4win 4.4.1 has been released (#GnuPG / #OpenPGP / #GPG / #GNUPrivacyGuard / #PGP / #PrettyGoodPrivacy / #Security / #Kleopatra / #GPA / #GNUPrivacyAssistant / #GpgOL / #GpgEX) https://gpg4win.org/

Why there is no multicodec for PGP public keys?

https://github.com/multiformats/multicodec/issues/381

#pgp

So, I am creating a new #pgp key for my #email, is "RSA" #encryption still the way to go? I noticed #GPG's default is "ECC" now

Thanks in advance!

@Arios The Problem is #Windows.

Don't expect the "#DRMflag" to work when it's being used by @signalapp (which in and of itself is problematic for demanding #PII like #PhoneNumbers and shilling a #Shitcoin-#Scam named #MobileCoin!) because like the #API to signal to Windows "I'm an #Antivirus product, disable defender!" this will be abused.

• Also working around #MicrosoftRecall and #Microsoft's unwillingness to accept (denial of) #consent is just bad and we should stop normalizing the use of said #Govware alltogether, as eben #pirating it normalizes it's use.

If you are actually concerned re: #privacy you'd yert signal, educate others and use #XMPP+#OMEMO (i.e. @monocles / #monoclesChat & @gajim ) or #PGP/MIME (i.e. @delta / #deltaChat & @thunderbird ) over @torproject / #Tor instead.

• It does take a bit of setup, but in return you get extreme gains in #privacy beyond what any #VPN provider can offer - legally and technically!

Not to mention #Signal falls under #CloudAct, so your privacy there is already nonexistant!

• Otherwise @Mer__edith would've been in jail for the rest of her life already due to the statistic inevitability of it's abuse!

Does it blow anyone else's mind that there is a JavaScript implementation of OpenPGP? Maybe less so that a critical vulnerability was just patched.

https://github.com/openpgpjs/openpgpjs/security/advisories/GHSA-8qff-qr5q-5pr8

#pgp #javascript

@kkarhan
Hab ich schon einmal angeregt.

Direktvertrieb mit Gehaltsband ohne überflüssige Recruiter, die eh nur lügen.

Und einer der Stelle repräsentativ entsprechenden Person. Azubis und Berufsanfänger, die noch zu Hause wohnen und nebenbei studieren sind eher ungeeignet, eine längere Karriere zu überblicken.

Bei den harten Auflagen schafft aber ohne Umschulung niemand, was zu posten.😃

#WasFehlt #Stellenmarkt #Bullshit #Gehaltstransparenz #Filler #Arbeitszeiten #Arbeitsort #Vertragsart #Gehalt #Bewertungen #KI #ChatBots #BotAccounts #Spam #Werbung #Moderatoren #Meldungen #JavaScript #Cookies #Tracking #Kontaktdaten #OnionService #Tor #eMail #PGP #XMPP #OMEMO #Chat #WebCall #Bewerbungsgespräche #BuzzwordBingo

Don't use PGP with emails.

> Security researchers are sounding the alarm over a fresh flaw in the JavaScript implementation of OpenPGP (OpenPGP.js) that allows both signed and encrypted messages to be spoofed.

> Discovered by Codean Labs' Edoardo Geraci and Thomas Rinsma, the vulnerability essentially undermines the core purpose of using public key cryptography to secure communications.

**OpenPGP.js bug enables encrypted message spoofing**

https://www.theregister.com/2025/05/20/openpgp_js_flaw/

#OpenPGP #PGP #Encryption

#DuckDuckFedi I have a #PGP key on a #YubiKey. I'm now at a new laptop, how do I teach my #gpg installation to make use or the YubiKey for my identity ? All documentation I find is about moving an existing key to a YubiKey rather than making use of an existing key on a YubiKey ...

I've made a small demo script for PGP signing a Python file; this technique could be easily extended to any other scripting language that supports block comments.

https://codeberg.org/Taffer/pygp-sign

Installers could verify the `.py` files in a package, and a runtime could also verify them at import time (hopefully with some key caching involved).

#python #pgp #gpg #codesigning #signatures #SoftwareSuppyChain

I was going to work on my Todoist -> Lunatask importer, but now I'm off on a tangent thinking about a dead-simple way to sign Python code.

#pgp #gpg #python #codesigning

related,

TIL that

This software [OpenKeyChain] is no longer actively developed. We will still apply security fixes where reported, and do basic maintenance work, but no new features or will be worked on. We will try to consider and merge contributions where possible.

#OpenKeyChain :android: #pgp #android

Meine Datenschutz und Privatsphäre Übersicht 2025, für Jedermann 🔐

Teilen er­be­ten ! :BoostOK:

als PDF Datei:

https://cryptpad.digitalcourage.de/file/#/2/file/8os68Lk8YMPfPi1UvHYtTTQI/

 #DSGVO #TDDDG ( #unplugtrump )
#Datenschutz #Privatsphäre #sicherheit #Verschlüsselung
#encryption #WEtell #SoloKey #NitroKey #Email #Cybersecurity #Pixelfed #Massenűberwachung #Leta
#Google #Metadaten #WhatsApp #Threema #Cryptpad #Signal
#Hateaid #Cyberstalking #Messenger #Browser #Youtube #NewPipe #Chatkontrolle #nichtszuverbergen #ÜberwachungsKapitalismus #Microsoft #Apple #Windows10 #Linux #Matrix #Mastodon #Friendica #Fediverse #Mastodir #Loops #2FA #Ransomware #Foss #VeraCrypt #HateAid #Coreboot #Volksverpetzer #Netzpolitik #OpenAndroidInstaller
#Digitalisierung #FragdenStaat #Shiftphone  #OpenSource #GrapheneOS #CCC #Mail #Mullvad #PGP #GnuPG #DNS #Gaming #linuxgaming #Lutris #Protondb #eOS #Enshittification
#Bloatware #TPM #Murena  #LiberaPay #GnuTaler #Taler #PreppingforFuture
#FediLZ #BlueLZ #InstaLZ #ThreatModel
#FLOSS #UEFI #Medienkompetenz

@privateger because #TOTP & #HOTP require to have more or less precise time.

• And that's way more hassle on an #offline / #airgapped device...

#PGP is king!
https://www.youtube.com/watch?v=vdab4T_CoN8

@privateger I just refuse to do #2FA unless a platform supports #PGP-based 2FA!

@dexiheart this is why I never use #2FA-#Apps:

• They always gonna fuck up this!

Either they should support #PGP-based 2FA or nothing at all!

Does anyone have an idea how to send #OpenPGP-signed e-mails in #Java? Instead of inline #PGP, the PGP/MIME format defined in RFC 3156 should be used: https://www.ietf.org/rfc/rfc3156.txt#:~:text=5.%20openpgp%20signed%20data

I already have a code draft, but the signature it attaches doesn't match the actual e-mail content, according to Thunderbird. The issue is not related to cryptography but to formatting. I tried my best but am unable to get the right combination of CRLF line endings, removed trailing whitespace etc.

https://stackoverflow.com/questions/79620112/how-to-sign-an-e-mail-with-pgp-mime-in-java

Сказ о документообороте

Во времена стародавние, когда интернет был почасовой и медленный, жила-была одна организация. Организация была большой и развесистой, во многих городах были отделения - и надо было как-то обмениваться служебками да приказами. Поскольку понятия "онлайн-CRM" тогда не существоало как класса - основным способом обмена были электронная почта да FTP. А что такое электронная почта? Это когда любой-разный может написать вам письмо хоть от Билла Гейтса, с ценными указаниями, и только вам решать, верить или не верить. Айтишник хоть в заголовки полезет посмотреть - а простой бухгалтер как? И вот умные люди тогда приспособили для этого программу PGP. Это не просто шифрование сообщений - это шифрование с несимметричными ключами: ваш секретный ключ есть только у вас, зато ваш публичный ключ может быть у кого угодно. Если вы хотите написать человеку - шифруете сообщение для него, его публичным ключом. Если вам хотят написать - шифруют для вас вашим. А получатель видит потом, кто шифровал и когда - потому что одновременно это была и электронная подпись.

https://habr.com/ru/articles/909182/

#gpg #pgp

Anyone at #rustweek up for #signing some #pgp keys? #keysigning