Post #2069092

2026-01-22 14:40 UTC

For those with an @lwn subscription, https://lwn.net/Articles/1054220/ &quot;Responses to gpg.fail&quot; by Joe Brockmeier (January 21, 2026) is available now. Others will have to wait a few days (until 2026-01-29) There is a good discussion in the comments. Important takeaway: Do not use &quot;cleartext&quot; signatures (where the signature is in the file itself) and if you must be _extra_ careful when verifying these.

Replies (2)

@jzb@fedi.lwn.net 2026-01-22 16:29

@GnuPG@mstdn.social Here is a subscriber link for folks who are not (yet?) a subscriber: https://lwn.net/SubscriberLink/1054220/c6f98b90a009fca2/ LWN subscribers can send subscriber links to friends or post on social media. The goal for us is not to paywall important coverage, but to encourage folks to subscribe and support our work. We want folks to be able to participate in discussions like these, so please consider subscribing if you don't now. @lwn@fedi.lwn.net

Open ##2697471
@DD9JN@social.darc.de 2026-01-23 10:05

Hi, my team mates here at gnupg.com published a long response on the recent #GnuPG things. It is worth a read even if you skip the technical details. English version: https://gnupg.com/20260122-39C3_reply_gpg_fail.html German version: https://gnupg.com/20260122-39C3_reply_gpg_fail.de.html

Open ##2697472