Comment

Comment by lrvick

Even if you ONLY care about encrypting files presumably you want to be able to decrypt them far into the future, with confidence no one else can do so.

If that is the case, you probably want:

1. a long lived keychain

2. a way to securely load private keys into smartcards such that they cannot be stolen by malware

3. a strategy to recover lost keys

4. a strategy to migrate from one keychain to another one

5. a way to notify people/software to stop encrypting data to your old key

6. a way to switch between multiple competing software implementations with a long established spec

The PGP ecosystem has you covered on all points. Age does few of these, and none of them well.

Doing things the right way takes a bit more up front thought and time, and you will thank yourself later.

That said, for the sake of compatibility, keyfork keys can be used with any pgp toolchain, as well as with signify, age, or whatever.

parent lrvick 11 months ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton