It's been more than five years since The PGP Problem was published, and I still hear from people who believe that using PGP (whether GnuPG or another OpenPGP implementation) is a thing they should be doing. It isn't. The part of the free and open source software community that thinks PGP is just dandy are…

Soatok is a blog or publication authored by Soatok Dhole, a security researcher and privacy advocate. Readers can explore articles covering topics such as cryptography, privacy-enhancing technologies, and digital rights. Additionally, they can learn about cybersecurity threats, encryption protocols, and strategies for protecting online privacy.

Dhole Moments

PGP is outdated and inferior for cryptographic tasks like signing software distributions, encrypting files, and identity verification. Instead, it recommends using tools like Sigstore for software distributions, SSH Signatures for signing Git tags/commits, Magic Wormhole for sending files, Tarsnap for backups, and age for file encryption. Signal is suggested for private messaging. The author is also developing a Public Key Directory for enhanced identity verification and encryption on the Fediverse.

What To Use Instead of PGP

Rust programmers when something is “old” and “outdated” because it’s not written in Rust.

Was a great article, with lots of citations and good recommendations. The final comic strip under the update, was a humorously ironic given the subject matter.

Very informative and comprehensive, highly recommended