[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Why Do Developers Continue to Sign with GNUPG



Hello Debian Security Team,

Since Debian is a major Linux distribution I want to ask why

software developers continue to digitally sign their code an

software packages with GNUPG when there are simpler alternatives

such as minisign (https://jedisct1.github.io/minisign/), signify, or age (https://github.com/FiloSottile/age).

PGP has been criticized for its being difficult to use by other

cryptographers:

https://blog.cryptographyengineering.com/2014/08/13/whats-matter-with-pgp/

I thank all responses in advance!

Best,

Tanveer Salim


Reply to: