Fosstodon

2 posts2 participants1 post today

Preston Maness ☭<a href="https://mastodon.ml/@Xeniax" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@Xeniax</a> Totally nerdsniped :D I'd love to be a part of the study.I don't think that <a href="https://tenforward.social/tags/KeyServers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#KeyServers</a> are dead. I think they evolved into Verifying Key Servers (VKS), like the one run by a few folks from the OpenPGP ecosystem at <a href="https://keys.openpgp.org/about" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://keys.openpgp.org/about</a> . More generally, I believe that <a href="https://tenforward.social/tags/PGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PGP</a> / <a href="https://tenforward.social/tags/GPG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GPG</a> / <a href="https://tenforward.social/tags/OpenPGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenPGP</a> retains important use-cases where accountability is prioritized, as contrasted with ecosystems (like <a href="https://tenforward.social/tags/Matrix" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Matrix</a>, <a href="https://tenforward.social/tags/SignalMessenger" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SignalMessenger</a>) where deniability (and Perfect Forward Secrecy generally) is prioritized. Further, PGP can still serve to bootstrap those other ecosystems by way of signature notations (see the <a href="https://tenforward.social/tags/KeyOxide" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#KeyOxide</a> project).Ultimately, the needs of asynchronous and synchronous cryptographic systems are, at certain design points, mutually exclusive (in my amateur estimation, anyway). I don't think that implies that email encryption is somehow a dead-end or pointless. Email merely, by virtue of being an asynchronous protocol, cannot meaningfully offer PFS (or can it? Some smart people over at crypto.stackexchange.com seem to think there might be papers floating around that can get at it: <a href="https://crypto.stackexchange.com/questions/9268/is-asynchronous-perfect-forward-secrecy-possible" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://crypto.stackexchange.com/questions/9268/is-asynchronous-perfect-forward-secrecy-possible</a>).To me, the killer feature of PGP is actually not encryption per se. It's certification, signatures, and authentication/authorization. I'm more concerned with "so-and-so definitely said/attested to this" than "i need to keep what so-and-so said strictly private/confidential forever and ever." What smaller countries like Croatia have done with <a href="https://tenforward.social/tags/PKI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PKI</a> leaves me green with envy.

Anthony SoraceAnyone here ever used the <a href="https://pdx.social/tags/keyoxide" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keyoxide</a> iOS app? How do you get your private key for a profile you create in it?

Dan ⁂<a href="https://beoriginal.social/tags/keyoxide" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keyoxide</a> looks like a nice useful tool - any true benefits over a normal website? <a href="https://keyoxide.org" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://keyoxide.org</a>

W3TealFlawless verification 😌 <a href="https://keyoxide.org/aspe:keyoxide.org:YM7J2J5UIVYRWSHRSOTYFYJ2HQ" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://keyoxide.org/aspe:keyoxide.org:YM7J2J5UIVYRWSHRSOTYFYJ2HQ</a> <a href="https://fosstodon.org/tags/keyoxide" class="mention hashtag" rel="tag">#keyoxide</a> <a href="https://fosstodon.org/tags/verification" class="mention hashtag" rel="tag">#verification</a> <a href="https://fosstodon.org/tags/links" class="mention hashtag" rel="tag">#links</a>

chimbosonicIntroducing WKD Tester – a free, open-source tool for testing OpenPGP Web Key Directory implementations! I built it to help out with the Keyoxide project, making it easier to generate lookup URIs and discover keys on the fly. Check it out at <a href="https://wkd.chimbosonic.com" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://wkd.chimbosonic.com</a>.<a href="https://fosstodon.org/tags/OpenPGP" class="mention hashtag" rel="tag">#OpenPGP</a> <a href="https://fosstodon.org/tags/WKD" class="mention hashtag" rel="tag">#WKD</a> <a href="https://fosstodon.org/tags/opensource" class="mention hashtag" rel="tag">#opensource</a> <a href="https://fosstodon.org/tags/cybersecurity" class="mention hashtag" rel="tag">#cybersecurity</a> <a href="https://fosstodon.org/tags/Keyoxide" class="mention hashtag" rel="tag">#Keyoxide</a>

chimbosonicHoping to meet fans of <a href="https://fosstodon.org/tags/Keyoxide" class="mention hashtag" rel="tag">#Keyoxide</a> and catchup with some of its maintainers at <a href="https://fosstodon.org/tags/FOSDEM" class="mention hashtag" rel="tag">#FOSDEM</a>. If you want an awesome <a href="https://fosstodon.org/tags/3DPrinted" class="mention hashtag" rel="tag">#3DPrinted</a> <a href="https://fosstodon.org/tags/Keyoxide" class="mention hashtag" rel="tag">#Keyoxide</a> MakerChip hit me up!

Preston Maness ☭<a href="https://tenforward.social/tags/gpg" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#gpg</a> key expirations have been updated for another two-year bump. I also removed <a href="https://tenforward.social/tags/twitter" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#twitter</a> / X signature notation (I've deleted my account there), and added a bunch of other signature notations for other places I am online. It's making my <a href="https://tenforward.social/tags/keyoxide" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keyoxide</a> page look dirty, but I intend to try and add support for as many of these as possible in the next few months.Also, I updated my <a href="https://tenforward.social/tags/tails" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tails</a> <a href="https://tenforward.social/tags/TailsOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TailsOS</a> installation while I was at it. I do most of my GPG key work from that environment.<a href="https://tenforward.social/tags/pgp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pgp</a> <a href="https://tenforward.social/tags/OpenPGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenPGP</a>

Preston Maness ☭<a href="https://fedi.hyperreal.coffee/@hyperreal" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@hyperreal</a> From having implemented a <a href="https://tenforward.social/tags/keyoxide" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keyoxide</a> claim verification service once, I can say that IRC and XMPP were far and away the most flaky endpoints to talk to, followed by Matrix. Ultimately, chat programs aren't really optimized for constantly serving up old messages at random (what Matrix claim verification does IIRC) and bots aren't always well-behaved (what IRC claim verification does IIRC). XMPP at least has the concept of storing non-message data (from some XEP or another; can't remember which) though.

mauvehed 🐿️ (KØMVH)Keybase is dead! Long live Keyoxide!<a href="https://keyoxide.org/aspe%3Akeyoxide.org%3AGK4JFFYSVEI5NMLLGAXX22QZAU" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://keyoxide.org/aspe%3Akeyoxide.org%3AGK4JFFYSVEI5NMLLGAXX22QZAU</a>Fingerprint: GK4JFFYSVEI5NMLLGAXX22QZAU<a href="https://defcon.social/tags/Keybase" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Keybase</a> <a href="https://defcon.social/tags/Keyoxide" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Keyoxide</a> <a href="https://defcon.social/tags/Hackers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hackers</a> <a href="https://defcon.social/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://defcon.social/tags/Privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Privacy</a> <a href="https://defcon.social/tags/Identity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Identity</a> <a href="https://defcon.social/tags/Encryption" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Encryption</a>

Pixelcode 🇺🇦The workflow of creating an <a href="https://social.tchncs.de/tags/Ariadne" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ariadne</a> signature profile on <a href="https://fosstodon.org/@keyoxide" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@keyoxide</a> is so much smoother than the <a href="https://social.tchncs.de/tags/GPG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GPG</a> equivalent! <a href="https://social.tchncs.de/tags/keyoxide" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keyoxide</a>• no looking up of command-line options • no weird “notations” • no exporting with --armor and copying .asc files • no dealing with keyserversYou just fill in a couple input fields on <a href="https://asp.keyoxide.org" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://asp.keyoxide.org</a> & save your key somewhere. Done. I'd say <a href="https://social.tchncs.de/tags/ASP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ASP</a> would be a nice addition to <a href="https://furry.engineer/@soatok" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@soatok</a>'s list of <a href="https://social.tchncs.de/tags/PGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PGP</a> alternatives! 😎 <a href="https://soatok.blog/2024/11/15/what-to-use-instead-of-pgp/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://soatok.blog/2024/11/15/what-to-use-instead-of-pgp/</a><a href="https://keyoxide.org/aspe:keyoxide.org:CSY6CYWH443HWQ5LCB6IDQFWVU" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://keyoxide.org/aspe:keyoxide.org:CSY6CYWH443HWQ5LCB6IDQFWVU</a>

Pixelcode 🇺🇦You may have noticed that I updated my <a href="https://social.tchncs.de/tags/Keyoxide" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Keyoxide</a> profile link in various places. That was legit – my old RSA <a href="https://social.tchncs.de/tags/OpenPGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenPGP</a> key had expired back in early November without me noticing, and yesterday, I created a new <a href="https://social.tchncs.de/tags/ed25519" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ed25519</a> key. If you still see my old Keyoxide link somewhere, please tell me. <a href="https://social.tchncs.de/tags/pgp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pgp</a> <a href="https://social.tchncs.de/tags/rsa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#rsa</a>🔗 <a href="https://keyoxide.org/FEF07E34F003F58EF486E744A49FCA80F5B7DE61" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://keyoxide.org/FEF07E34F003F58EF486E744A49FCA80F5B7DE61</a>First, however, I had to manually update <a href="https://social.tchncs.de/tags/GPG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GPG</a> to version 2.4 by compiling it from source. 🤡🔗 <a href="https://www.procustodibus.com/blog/2023/02/gpg-2-4-on-ubuntu-22-04/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.procustodibus.com/blog/2023/02/gpg-2-4-on-ubuntu-22-04/</a>QT <a href="https://fed.brid.gy/r/https://bsky.app/profile/did:plc:dxkyhpbv4bsktz3x2yp6m2rz/post/3lcvpgpgnu22j" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://fed.brid.gy/r/https://bsky.app/profile/did:plc:dxkyhpbv4bsktz3x2yp6m2rz/post/3lcvpgpgnu22j</a>

Preston Maness ☭<a href="https://social.lol/@prami" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@prami</a> Keybase has been on life support for a while now. Thankfully, there's <a href="https://tenforward.social/tags/KeyOxide" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#KeyOxide</a> as an alternative.

HoldMyType<a href="https://floss.social/@fdroidorg" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@fdroidorg</a> yes but - gmail is unlikely to accept <a href="https://mathstodon.xyz/tags/jmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#jmap</a> - <a href="https://mathstodon.xyz/tags/keyoxide" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keyoxide</a> qr scan of 2 keys didnt work today on okc - encoding from der to pfx <a href="https://mathstodon.xyz/tags/openssl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#openssl</a> <a href="https://mathstodon.xyz/tags/mutt" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mutt</a> is simpler

BTW I'm not FinnishGlad to know we can now verify <a href="https://scg.owu.one/tags/gotosocial" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GotoSocial</a> accounts (and most other ActivityPub accounts) on <a href="https://scg.owu.one/tags/keyoxide" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Keyoxide</a> !

Binzy_BoiAre there currently any Keyoxide providers outside of the main site?<a href="https://piefed.social/post/193653" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://piefed.social/post/193653</a>

tallship<a class="hashtag" href="https://public.mitra.social/collections/tags/keyoxide" rel="nofollow noopener noreferrer" target="_blank">#KeyOxide</a> Mobile 2.4 has been released<a href="https://berkersen.dev/keyoxide-mobile-240" rel="nofollow noopener noreferrer" target="_blank">https://berkersen.dev/keyoxide-mobile-240</a><a class="hashtag" href="https://public.mitra.social/collections/tags/tallship" rel="nofollow noopener noreferrer" target="_blank">#tallship</a> <a class="hashtag" href="https://public.mitra.social/collections/tags/foss" rel="nofollow noopener noreferrer" target="_blank">#FOSS</a> <a class="hashtag" href="https://public.mitra.social/collections/tags/privacy" rel="nofollow noopener noreferrer" target="_blank">#privacy</a> <a class="hashtag" href="https://public.mitra.social/collections/tags/identity" rel="nofollow noopener noreferrer" target="_blank">#identity</a>⛵

Berker🚀 Keyoxide Mobile 2.4.0 is here with offline-mode support! 🔒 But before you update, please back up your profiles and contacts as this update will wipe them out locally. For more info: <a href="https://berkersen.dev/keyoxide-mobile-240" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://berkersen.dev/keyoxide-mobile-240</a> 📱 <a href="https://fosstodon.org/tags/Keyoxide" class="mention hashtag" rel="tag">#Keyoxide</a> <a href="https://fosstodon.org/tags/Privacy" class="mention hashtag" rel="tag">#Privacy</a> <a href="https://fosstodon.org/tags/DigitalIdentity" class="mention hashtag" rel="tag">#DigitalIdentity</a> <a href="https://fosstodon.org/tags/OfflineMode" class="mention hashtag" rel="tag">#OfflineMode</a>

Dominik WombacherI stumbled across Keyoxide today. I gave it a shot, created and uploaded an ASP [1]. Now I have my own profile [2] that verifies some of my identities, neat! Adding my mail throws an error message though. I use WKD to publish my OpenPGP key [3]. I learned that my mail address is therefore already discovered by keyoxide.org [4], can't be used twice as it seems.[1] <a href="https://asp.keyoxide.org" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://asp.keyoxide.org</a> [2] <a href="https://keyoxide.org/aspe:keyoxide.org:CDKSMZK6K2WIQFSXRLHXVRIJ6E" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://keyoxide.org/aspe:keyoxide.org:CDKSMZK6K2WIQFSXRLHXVRIJ6E</a> [3] <a href="https://dominik.wombacher.cc/posts/my-gpg-key-is-now-available-via-web-key-directory-wkd.html" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://dominik.wombacher.cc/posts/my-gpg-key-is-now-available-via-web-key-directory-wkd.html</a> [4] <a href="https://keyoxide.org/dominik@wombacher.cc" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://keyoxide.org/dominik@wombacher.cc</a><a href="https://fosstodon.org/tags/keyoxide" class="mention hashtag" rel="tag">#keyoxide</a> <a href="https://fosstodon.org/tags/openpg" class="mention hashtag" rel="tag">#openpg</a> <a href="https://fosstodon.org/tags/wkd" class="mention hashtag" rel="tag">#wkd</a>

chimbosonic<a href="https://social.anoxinon.de/@Codeberg" class="u-url mention">@Codeberg</a> <a href="https://fosstodon.org/tags/keyoxide" class="mention hashtag" rel="tag">#keyoxide</a>, <a href="https://fosstodon.org/tags/Tor" class="mention hashtag" rel="tag">#Tor</a>, <a href="https://fosstodon.org/tags/Hagrid" class="mention hashtag" rel="tag">#Hagrid</a> and <a href="https://fosstodon.org/tags/Veilid" class="mention hashtag" rel="tag">#Veilid</a>

Kristófer Reykjalín<a href="https://fosstodon.org/tags/Gravatar" class="mention hashtag" rel="tag">#Gravatar</a> has come a really long way. I think I might make that my main "all my links" hub in addition to <a href="https://fosstodon.org/tags/Keyoxide" class="mention hashtag" rel="tag">#Keyoxide</a> 🤔 It just looks nice!<a href="https://gravatar.com/kreykjalin" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://gravatar.com/kreykjalin</a>Full disclosure: I work for <a href="https://fosstodon.org/tags/Automattic" class="mention hashtag" rel="tag">#Automattic</a>, the company that maintains Gravatar.

Recent searches

Search options

Administered by:

Server stats:

#keyoxide