Conversation

Jarkko Sakkinen

Edited 2 months ago

sq is #openpgp implementation: https://sequoia-pgp.org/

I wonder if sequoia can git tag -s?

Also need to test if smartcard support is already working https://sequoia-pgp.org/blog/2021/12/20/202112-openpgp-card-ci/

And most importantly has a gpg-agent implementation: https://lib.rs/crates/sequoia-gpg-agent. But have to check how stable that is.

These three are minimum set of features that any OpenPGP implementation needs to fully support in order to be compatible with kernel development workflows.

#gnupg

1
0
0

Vlastimil Babka

Edited 2 months ago
@jarkko there's also https://fosstodon.org/@hko/112394404463570109 and related posts and links in Heiko's profile that would appear to have everything needed.
1
0
1
@vbabka thanks ill check it out. Would me nice to have fresh take on openpgp. E.g. something like export/import of whole database with clean primitives would be nice.
1
0
1
@vbabka https://archlinux.org/download/ this is where I found about sq. one large volume using it for signature checks instructions is a relevant ref for long-term applicability. And it seems to be already somewhat well defined product.
2
0
1
@vbabka That said, definitely going to check Heiko's work. i don't know him personally but often seems to have interesting takes on topics, and perhaps these tools might support better different workflows.
1
0
1
@jarkko I'll be interested in your findings, didn't have time to try those myself yet :)
0
0
1