#gpg — Public Fediverse posts

"Don't Trust, Verify"
Or "Validating origin and integrity without public CAs"

https://blog.k3can.us/posts/2026/aug/donttrustjustverify/

Just playing around with couple methods of validating data origin and integrity without blindly relying on public CAs. It's sort of a follow-up-to-a-follow-up on my post about using Cloudlfare tunnels to #selfhost personal sites or services.

#tls #selfhosting #selfhosted #encryption #gpg

"Don't Trust, Verify"
Or "Validating origin and integrity without public CAs"

https://blog.k3can.us/posts/2026/aug/donttrustjustverify/

Just playing around with couple methods of validating data origin and integrity without blindly relying on public CAs. It's sort of a follow-up-to-a-follow-up on my post about using Cloudlfare tunnels to #selfhost personal sites or services.

#tls #selfhosting #selfhosted #encryption #gpg

OpenPGP-Karte eingerichtet: Curve 25519 scheitert am Kartenlimit, die Unterschlüssel landen trotzdem in Hardware

https://www.kernel-error.de/2026/08/16/openpgp-karte-eingerichtet-curve-25519-scheitert-am-kartenlimit-die-unterschluessel-landen-trotzdem-in-hardware/

OpenPGP-Karte eingerichtet: Curve 25519 scheitert am Kartenlimit, die Unterschlüssel landen trotzdem in Hardware

https://www.kernel-error.de/2026/08/16/openpgp-karte-eingerichtet-curve-25519-scheitert-am-kartenlimit-die-unterschluessel-landen-trotzdem-in-hardware/

#Mozilla revoca la #chiave #GPG di #Firefox: rischio #supplychain, scatta l'allarme per #Linux

#uno

https://www.redhotcyber.com/post/mozilla-revoca-la-chiave-gpg-di-firefox-rischio-supply-chain-scatta-lallarme-per-linux/

#Mozilla revoca la #chiave #GPG di #Firefox: rischio #supplychain, scatta l'allarme per #Linux

#uno

https://www.redhotcyber.com/post/mozilla-revoca-la-chiave-gpg-di-firefox-rischio-supply-chain-scatta-lallarme-per-linux/

#Mozilla Issues New #Firefox #GPG Key Following Exposure

https://www.securityweek.com/mozilla-issues-new-firefox-gpg-key-following-exposure/

#cybersecurity #FOSS

#Mozilla Issues New #Firefox #GPG Key Following Exposure

https://www.securityweek.com/mozilla-issues-new-firefox-gpg-key-following-exposure/

#cybersecurity #FOSS

So I created a simple guide to use GNUPG. Take a look and feel free to provide any feedback (for improvements or any reviews)
https://netizens-corner.neocities.org/content/compendium/gpg4humans-INTRO

Also; if think more of such simplistic guides should exist then please support me via:
https://netizens-corner.neocities.org/support#donate_to_me

#freesoftware #gnulinux #FSF #opensource #gnupg #gpg #libresoftware #encryption #privacy

Einordnung: Positiv ist die transparente Reaktion, beruhigend ist der Vorfall trotzdem nicht. Signaturschlüssel sind Teil der Vertrauenskette einer Softwareverteilung. Solche Geheimnisse gehören nicht in Repositories - auch nicht in private. Technische Schutzmechanismen müssen menschliche Fehler hier auffangen.

2/2

#GPG #SupplyChain #Mozilla #KuketzAugust

Einordnung: Positiv ist die transparente Reaktion, beruhigend ist der Vorfall trotzdem nicht. Signaturschlüssel sind Teil der Vertrauenskette einer Softwareverteilung. Solche Geheimnisse gehören nicht in Repositories - auch nicht in private. Technische Schutzmechanismen müssen menschliche Fehler hier auffangen.

2/2

#GPG #SupplyChain #Mozilla #KuketzAugust

Mozilla rotiert kurzfristig seinen GPG-Signaturschlüssel für Firefox und Thunderbird. Der vorherige Unterschlüssel war unverschlüsselt in einem privaten GitHub-Repository gelandet. Mozilla sieht laut Audit-Logs keinen unbefugten Zugriff, hat den Schlüssel aber vorsorglich widerrufen.

https://blog.mozilla.org/security/2026/08/10/updated-gpg-key-for-signing-firefox-and-thunderbird-releases/

1/2

#Firefox #Thunderbird #GPG #KuketzAugust

Mozilla rotiert kurzfristig seinen GPG-Signaturschlüssel für Firefox und Thunderbird. Der vorherige Unterschlüssel war unverschlüsselt in einem privaten GitHub-Repository gelandet. Mozilla sieht laut Audit-Logs keinen unbefugten Zugriff, hat den Schlüssel aber vorsorglich widerrufen.

https://blog.mozilla.org/security/2026/08/10/updated-gpg-key-for-signing-firefox-and-thunderbird-releases/

1/2

#Firefox #Thunderbird #GPG #KuketzAugust

Einen modernen OpenPGP-Schlüssel bauen: Ed25519, drei Unterschlüssel und die Härtung, die ihn geschwächt hat

https://www.kernel-error.de/2026/08/02/openpgp-schluessel-ed25519-bauen-gnupg-haertung-praeferenzen/

Einen modernen OpenPGP-Schlüssel bauen: Ed25519, drei Unterschlüssel und die Härtung, die ihn geschwächt hat

https://www.kernel-error.de/2026/08/02/openpgp-schluessel-ed25519-bauen-gnupg-haertung-praeferenzen/

Keyoxide: den OpenPGP-Schlüssel an Online-Identitäten binden, vier grüne Haken und ein rotes Kreuz

https://www.kernel-error.de/2026/08/02/keyoxide-openpgp-schluessel-an-online-identitaeten-binden/

Keyoxide: den OpenPGP-Schlüssel an Online-Identitäten binden, vier grüne Haken und ein rotes Kreuz

https://www.kernel-error.de/2026/08/02/keyoxide-openpgp-schluessel-an-online-identitaeten-binden/

Been ruminating on this for a while and finally sat down and coded it. For some pages on my site there's now a footer that allows you to download the Markdown file and a #GPG signature of that page.

Remembering the words of an old nerd when I started signing all my emails with #PGP on a mailing list: "Why would you _voluntarily_ give up plausible deniability on everything you write?" it won't be every page.

But from time to time it may come in useful.

Check it out:

https://vees.net/contact/

Been ruminating on this for a while and finally sat down and coded it. For some pages on my site there's now a footer that allows you to download the Markdown file and a #GPG signature of that page.

Remembering the words of an old nerd when I started signing all my emails with #PGP on a mailing list: "Why would you _voluntarily_ give up plausible deniability on everything you write?" it won't be every page.

But from time to time it may come in useful.

Check it out:

https://vees.net/contact/

Had to get all my #GPG stuff up to date for work so if anyone wants to send me super secret squirrel notes you can grab it at https://vees.net/contact/

Had to get all my #GPG stuff up to date for work so if anyone wants to send me super secret squirrel notes you can grab it at https://vees.net/contact/

RE: https://digitalcourage.social/@echo_pbreyer/116889627679596681

"As a result, mass scanning is now permitted again until 2028."

"A symbolic exemption was adopted for encrypted communications"

"The fact that Chat Control is moving forward against the will of the majority of voting MEPs is a farce and damages democracy."

"Blanket chat control is just as unacceptable as indiscriminately opening everyone’s physical mail."

#chatcontrol #pgp #gpg

RE: https://digitalcourage.social/@echo_pbreyer/116889627679596681

"As a result, mass scanning is now permitted again until 2028."

"A symbolic exemption was adopted for encrypted communications"

"The fact that Chat Control is moving forward against the will of the majority of voting MEPs is a farce and damages democracy."

"Blanket chat control is just as unacceptable as indiscriminately opening everyone’s physical mail."

#chatcontrol #pgp #gpg

#GPG ... the oldest and best tool to communicate with #Privacy. You already learn many commands from Linux and other OS and software. You keep ignoring to learn GPG. :D LoL

Learn the important things to back up before reinstalling your Linux system. SSH/GPG keys, dotfiles, packages, browser data, and more.

Full guide here: https://ostechnix.com/things-to-back-up-before-reinstalling-linux/

#Linux #Backup #SystemAdministration #Dotfiles #SSH #GPG #PackageManagement #Linuxhowto #Linuxcommands

Learn the important things to back up before reinstalling your Linux system. SSH/GPG keys, dotfiles, packages, browser data, and more.

Full guide here: https://ostechnix.com/things-to-back-up-before-reinstalling-linux/

#Linux #Backup #SystemAdministration #Dotfiles #SSH #GPG #PackageManagement #Linuxhowto #Linuxcommands

Merci rephrase, j'ai retrouvé ma passphrase #GPG 🙂

https://roguedaemon.net/rephrase/
(déjà packagé dans Debian)

Pas merci Thunderbird qui bypasse GPG et donc ben on l'oublie la passphrase…

#GnuPG

Merci rephrase, j'ai retrouvé ma passphrase #GPG 🙂

https://roguedaemon.net/rephrase/
(déjà packagé dans Debian)

Pas merci Thunderbird qui bypasse GPG et donc ben on l'oublie la passphrase…

#GnuPG

OpenPGP: PGP meets AusweisApp und ERV

https://w11.haus/947

OpenPGP: PGP meets AusweisApp und ERV

https://w11.haus/947

If you include your #PGP key in your #Mastodon bio (or any social platform really), why? The only use case I have at the moment is for signing my git commits, but I'm curious if I'm missing out on something more.

Also just discovered @keyoxide which could be anorher use. #keyoxide

#gpg #privacy #encryption #security

If you include your #PGP key in your #Mastodon bio (or any social platform really), why? The only use case I have at the moment is for signing my git commits, but I'm curious if I'm missing out on something more.

Also just discovered @keyoxide which could be anorher use. #keyoxide

#gpg #privacy #encryption #security

Do you sign your git commits?

If so, do you use GPG or SSH? And why did you pick one over the other (if you actively chose vs using GPG from before SSH was an option)?

#git #gpg #ssh #security

Do you sign your git commits?

If so, do you use GPG or SSH? And why did you pick one over the other (if you actively chose vs using GPG from before SSH was an option)?

#git #gpg #ssh #security

@gerowen it’s not available in Arch, because #gpg decided to roll their own kyber algorithms instead of using the ones that the rest of the #openpgp community standardised on. They’re just as secure, but different enough to not interoperate with everyone else. Most linux distros are refusing to ship them as a result. See e.g. https://wiki.archlinux.org/index.php?title=GnuPG&oldid=860217#OpenPGP_compatibility

@gerowen it’s not available in Arch, because #gpg decided to roll their own kyber algorithms instead of using the ones that the rest of the #openpgp community standardised on. They’re just as secure, but different enough to not interoperate with everyone else. Most linux distros are refusing to ship them as a result. See e.g. https://wiki.archlinux.org/index.php?title=GnuPG&oldid=860217#OpenPGP_compatibility

Using a VM to poke around with updated #GPG from their repos and it offers hybrid post #quantum key types (ECC/Kyber) now with the following options for Kyber:

(1) Kyber 768 (bp256) *default*
(2) Kyber 1024 (bp384)
(3) Kyber 768 (X25519)
(4) Kyber 1024 (X448)

It's probably already available in Arch and its derivatives, but it probably won't hit the longer lived distributions like Debian or Fedora for a little while yet, but it's a thing now.

#Security #Privacy

Using a VM to poke around with updated #GPG from their repos and it offers hybrid post #quantum key types (ECC/Kyber) now with the following options for Kyber:

(1) Kyber 768 (bp256) *default*
(2) Kyber 1024 (bp384)
(3) Kyber 768 (X25519)
(4) Kyber 1024 (X448)

It's probably already available in Arch and its derivatives, but it probably won't hit the longer lived distributions like Debian or Fedora for a little while yet, but it's a thing now.

#Security #Privacy

#instagram eliminou a criptografia de ponta a ponta.
Evite esse aplicativo mesmo com criptografia. Quer mandar uma mensgem criptografada? Use #gpg .

https://stallman.org/archives/2026-mar-jun.html#2_June_2026_(Instagram_eliminated_end-to-end_encryption)

#spying #espionagem #evilcorp #eviltech #stallman

#instagram eliminou a criptografia de ponta a ponta.
Evite esse aplicativo mesmo com criptografia. Quer mandar uma mensgem criptografada? Use #gpg .

https://stallman.org/archives/2026-mar-jun.html#2_June_2026_(Instagram_eliminated_end-to-end_encryption)

#spying #espionagem #evilcorp #eviltech #stallman

¿Cómo evita APT que te metan malware al instalar un paquete en Debian (y derivadas)? 🐧🛡️

No es magia, es criptografía asimétrica y hash.

En este video te explico a fondo cómo funciona la cadena de confianza, las firmas digitales y las llaves GPG que validan tus repositorios paso a paso.

Miralo acá:
🚀 https://youtu.be/6f2y_py7Kek

Ideal para SysAdmins y curiosos del hardening! 💻🔥

Espero que les guste y les sirva!
Cualquier duda, como siempre, me comentan 💬

#Linux #Ciberseguridad #GPG #SysAdmin

¿Cómo evita APT que te metan malware al instalar un paquete en Debian (y derivadas)? 🐧🛡️

No es magia, es criptografía asimétrica y hash.

En este video te explico a fondo cómo funciona la cadena de confianza, las firmas digitales y las llaves GPG que validan tus repositorios paso a paso.

Miralo acá:
🚀 https://youtu.be/6f2y_py7Kek

Ideal para SysAdmins y curiosos del hardening! 💻🔥

Espero que les guste y les sirva!
Cualquier duda, como siempre, me comentan 💬

#Linux #Ciberseguridad #GPG #SysAdmin

A stupid question... If I change my GPG passphrase, will I still be able to decrypt all my previously encrypted files with the new passphrase?

#gpg #question #fediverse #security

A stupid question... If I change my GPG passphrase, will I still be able to decrypt all my previously encrypted files with the new passphrase?

#gpg #question #fediverse #security

I have been dragged into the rabbit hole of GnuPG/LibrePGP VS Sequoia/OpenPGP and, boy it is ugly. Yeah, yeah, I know, PGP is bad, but of all the ugly things that could have happened to the FOSS crypto space, this is really unwelcome. I wish people would just sit at a table and talk.

#pgp #gpg #sequoia #crypto #cryptography #security #foss #floss #libre #drama #ietf #privacy #openpgp #librepgp

I wonder if it would benefit some social networks to integrate a PGP/GPG style "trust" (https://phildev.net/pgp/gpgtrust.html) into user accounts.

Accounts could 'trust' other accounts with varying levels so as to vet them for others. Maybe use QR codes for in-person 'signing'?

This may be an effective way to reduce unwanted AI/bot activity since the approach is toward verifying "I know and trust this person" rather than how some karma or reputation systems work.

#ai #bot #gpg #pgp #trust #socialmedia