/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 blog.josefsson.org
The Case for Short OpenPGP Key Validity Periods - Simon Josefsson's blog
| | lwn.net
OpenPGP certificate flooding [LWN.net]
3.0 parsecs away

Travel
| | [AI summary] An article details a denial-of-service attack where malicious actors flooded OpenPGP public keys with thousands of bogus certificates, causing performance failures in GnuPG and highlighting the maintenance issues of the aging SKS key server network.
| | tech.michaelaltfield.net
Mitigating Poisoned PGP Certificates (CVE-2019-13050) - Michael Altfield's Tech Blog
4.2 parsecs away

Travel
| | Did Cert Flooding break your email? This guide shows how to detect & clean poisoned keys in your keyring and how to update your config to prevent importing poisoned keys in the future
| | danielpecos.com
How to rotate your OpenPGP / GnuPG keys
1.5 parsecs away

Travel
| | Tutorial on how to generate a new PGP / GPG key pair and properly rotate from your old one.
| | logr.cogley.info
RC Logr 20200721 195846 : Rick Cogley Logr
15.8 parsecs away

Travel
| If you want to autosign git commits on Mac, there are a couple of tricks to it. I have not been able to get brew gpg to work consistently well, but installing from gpgtools.org seems to be able to be made to work. This worked for me: Install GPGTools from https://gpgtools.org Create / import a key, then run gpg -list-secret-keys to find the sec key fingerprint Make git settings, specifying the signing key as the fingerprint with no spaces: 1 2 3 4 % git config -global gpg.