Collaborate Disseminate
Is it safe to publish your public GPG keys on GitHub?
And link to them in the signature of the e-mails you send, together with the fingerprint after the link?
Continue reading Publish public GPG key on GitHub [duplicate]
I started playing with encrypting some personal files, and I exported the private key as an .asc file, but also on hard copy (plain paper) and can’t understand a thing about how it says to import it from there… It looks more like a recov… Continue reading How do I import a private key from a hard copy?
I’ve heard it’s good for security to have a shorter expiration time for GPG keys, but I’m still not clear on why that is exactly. Is the purpose of a GPG key mainly to inform the legitimate user that they ought to generate a key at some p… Continue reading Could someone bypass a GPG key’s expiration date by simply using that key on a computer with an incorrect system time?
Imagine this scenario
A StackExchange user sends you a PGP-encrypted message
You decrypt the message and discover that you are being blackmailed
You report the message to the admins but they are unable to view the content
In this situati… Continue reading How can I prove the content of a PGP-encrypted message to a third party?
I have published my gpg key on keys.openpgp.org, keyserver.ubuntu.com, and my own WKDs corresponding to each of the two email addresses on my own domains.
Another user updated my public key from my WKD (per my instruction using gpg –auto-… Continue reading How does one publish UID revocations in the age of Hagrid?
I’m able to export the public key using gpg2 –export-ssh-key 15EDA5801C8D18FF. How do I get the private SSH subkey?
Asked this question way too complicated here as well
Continue reading How to export the private SSH subkey from gpg?
I’m trying to use a Yubi Key to decrypt data on a remote server that I authenticate to by ssh.
I forwarded the gpg-agent, the gpg-agent.conf is:
enable-ssh-support
default-cache-ttl 60
max-cache-ttl 120
pinentry-program /usr/local/bin/pine… Continue reading Using Yubi Key to decrypt data on remote server [migrated]
I need to generate quite a lot of gpg-keys for different tasks on my Debian Bullseye (Stable) machine. Also I want the highest level of security while being able to automate as much as possible.
Therefore I wrote a bash-script with the fo… Continue reading Almost unattended generation of "a pretty good keypair"
I’m attempting to establish a process for setting up a new GPG identity for myself and my threat model.
Much of it is following guides which I believe are still considered best practices:
https://github.com/drduh/YubiKey-Guide
https://bl… Continue reading Why does ECC not have an encrypt capability in GPG, but RSA does?
Why don’t git servers (gitlab, github, etc…) allow for a whitelist of public GPG keys allowed to sign commits? For example, Alice owns a GPG key with fingerprint 0A1B2C3D while Bob’s is 4E5F0A0B.
They work together and they pass their key’… Continue reading Keeping a whitelist of GPG keys on git server