In bad news, the PGP madness will never end :(
I'm a Debian Developer and it's our key tool for nearly everything. New password? Send a GPG signed message, get a GPG encrypted reply.
Uploading to the archive? Sign the source with gpg then push. The new hotness we've been arguing over is gpg signing git commits as a method of release 😬 .
To become a DD, you need 2 signatures on your key from active DDs, because ~web of trust~.
My key expired in September and until I uploaded an extended version (and then keyring team accepted it) I was locked out of contributing. It lasted for a month.
My statement on GPG at a recent debconf was "It's a fucking nightmare" and got general agreement from a lot of project veterans.
In short:
aaaaAAAAAAAAAAA
Røde
npub1xx…yfuef
2024-11-15 18:24:01 UTC
in reply to nevent1q…enaw
Author Public Key
npub1xxt5jkkhxgcgqcdccjvmedvsgypyunlaaxfwug7x2rr247mwavgqpyfuefSeen on
wss://relay.momostr.pinkPublished at
2024-11-15 18:24:01 UTCEvent JSON
{
"id": "78e9cd0bcd30d228c993783ba0c748ef1215363ed341dce54ea7724e4011cc59",
"pubkey": "3197495ad732308061b8c499bcb59041024e4ffde992ee23c650c6aafb6eeb10",
"created_at": 1731695041,
"kind": 1,
"tags": [
[
"p",
"7242fe8980b966af4bc244f32a570329a50a19594896e1707268651ae7b4638a"
],
[
"e",
"e091f9a694825bffd5f52ab306e1f769baa7c68f2695c65b80de5625236d2832",
"",
"root",
"7242fe8980b966af4bc244f32a570329a50a19594896e1707268651ae7b4638a"
],
[
"proxy",
"https://woof.tech/@red/113488366241628307",
"web"
],
[
"proxy",
"https://woof.tech/users/red/statuses/113488366241628307",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://woof.tech/users/red/statuses/113488366241628307",
"pink.momostr"
],
[
"-"
]
],
"content": "In bad news, the PGP madness will never end :(\n\nI'm a Debian Developer and it's our key tool for nearly everything. New password? Send a GPG signed message, get a GPG encrypted reply.\n\nUploading to the archive? Sign the source with gpg then push. The new hotness we've been arguing over is gpg signing git commits as a method of release 😬 .\n\nTo become a DD, you need 2 signatures on your key from active DDs, because ~web of trust~.\n\nMy key expired in September and until I uploaded an extended version (and then keyring team accepted it) I was locked out of contributing. It lasted for a month.\n\nMy statement on GPG at a recent debconf was \"It's a fucking nightmare\" and got general agreement from a lot of project veterans.\n\nIn short:\naaaaAAAAAAAAAAA",
"sig": "8cd5a80a34facc2810bd19a68b73c9ed77fffe7ab590cb70ab8f4725238fa6507489220f7f17ca85343eea6f6246ccd51449565c1f574d07245bde6793f614cd"
}