I just released version 0.1.3 of rsop-oct, a stateless #OpenPGP ("SOP") CLI tool for use with OpenPGP card hardware devices:
https://crates.io/crates/rsop-oct/
Like its sibling project #rsop, rsop-oct is based on @rpgp
This update adds support for the SOP command 'certify-userid'.
This allows issuing certifications (aka "third-party signatures") over identities in other people's OpenPGP certificates, directly with an OpenPGP card device.
For more on #SOP, see https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/
Oh and with #encryption I mean the gritty #DIY stuff. So don’t rely on the encrypted backup option baked in your favorite app or (mobile) OS.
If you don’t own it, you are being owned.
#GPG (or #GnuPG) using elliptic curve factorization is your friend!
In the (hopefully near) future post-quantum encryption #pqe will be available in some form. Although this tech was anticipated to arrive years ago… so what’s keeping it.
Meine Datenschutz und Privatsphäre Übersicht 2025, für Jedermann
als PDF Datei:
https://cryptpad.digitalcourage.de/file/#/2/file/vQv0YkkA+eOK5la9awQ0E+jg/p/
Passwort:
idFLSmEeHa#5w4D$"Jq
#DSGVO #TDDDG #unplugtrump
#Datenschutz #Privatsphäre #sicherheit #Verschlüsselung #Adguard
#encryption #WEtell #SoloKey #NitroKey #Email #Cybersecurity #Pixelfed #Massenűberwachung #Leta
#Google #Metadaten #WhatsApp #Threema #Cryptpad #Signal
#Hateaid #Cyberstalking #Messenger #Browser #Youtube #NewPipe #Chatkontrolle #nichtszuverbergen #ÜberwachungsKapitalismus #Microsoft #Apple #Windows10 #Linux #Matrix #Mastodon #Friendica #Fediverse #Mastodir #Loops #2FA #Ransomware #Foss #VeraCrypt #HateAid #Coreboot #Volksverpetzer #Netzpolitik #OpenAndroidInstaller #Nobara
#Digitalisierung #FragdenStaat #Shiftphone #OpenSource #GrapheneOS #CCC #Mail #Mullvad #PGP #GnuPG #DNS #Gaming #linuxgaming #Lutris #Protondb #eOS #Enshittification
#Bloatware #TPM #Murena #LiberaPay #GnuTaler #Taler #PreppingforFuture
#FediLZ #BlueLZ #InstaLZ #ThreatModel
#FLOSS #UEFI #Medienkompetenz
I just learned that when encrypting email with PGP, the subject line of the email is NOT encrypted. Two things about this fascinate me:
- what a glaring oversight. How did anyone ever think that not encrypting the subject line was a good idea
- why is this not more commonly known? i feel like every guide how to use PGP for email should be screaming from the rooftops: "TAKE NOTE THAT THE SUBJECT LINE OF YOUR EMAILS IS NOT ENCRYPTED". Instead, I just found it deep in the details of one such guide. Many guides (yes I checked several) don't include this information at all.
I just released version 0.7.1 of #rsop, a stateless #OpenPGP ("SOP") CLI tool based on @rpgp:
https://crates.io/crates/rsop/
This version adds support for the "merge-certs" SOP command, which consolidates multiple versions of a certificate into a unified aggregate view.
For more on #SOP, see https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/
#GnuPG v2.5.8 is for those that are using 2.5.7 - as it fixes a regression and improves on little things.
(2.5.x is a "public testing release series" and comes with a post-quantum cryptography encryption algorithm.)
Meine Datenschutz und Privatsphäre Übersicht 2025, für Jedermann
als PDF Datei:
https://cryptpad.digitalcourage.de/file/#/2/file/v46BVMnJApavCdhArxdHCBxe/
#DSGVO #TDDDG #unplugtrump
#Datenschutz #Privatsphäre #sicherheit #Verschlüsselung #Adguard
#encryption #WEtell #SoloKey #NitroKey #Email #Cybersecurity #Pixelfed #Massenűberwachung #Leta
#Google #Metadaten #WhatsApp #Threema #Cryptpad #Signal
#Hateaid #Cyberstalking #Messenger #Browser #Youtube #NewPipe #Chatkontrolle #nichtszuverbergen #ÜberwachungsKapitalismus #Microsoft #Apple #Windows10 #Linux #Matrix #Mastodon #Friendica #Fediverse #Mastodir #Loops #2FA #Ransomware #Foss #VeraCrypt #HateAid #Coreboot #Volksverpetzer #Netzpolitik #OpenAndroidInstaller #Nobara
#Digitalisierung #FragdenStaat #Shiftphone #OpenSource #GrapheneOS #CCC #Mail #Mullvad #PGP #GnuPG #DNS #Gaming #linuxgaming #Lutris #Protondb #eOS #Enshittification
#Bloatware #TPM #Murena #LiberaPay #GnuTaler #Taler #PreppingforFuture
#FediLZ #BlueLZ #InstaLZ #ThreatModel
#FLOSS #UEFI #Medienkompetenz
@mailbox_org Sehr schön, dass Ihr OpenPGP weiterhin unterstützt.
Es ist eine der wenigen dezentralen und mit OpenPGPv4 gut standardisierten Möglichkeiten, sich vertraulich auszutauschen.
Ein Hinweis: Wer Eure severseitige Lösung verwendet hat vermutlich keine Ende-zu-Ende Verschlüsselung mehr, weil er der Software auf Eurem Server vertrauen muss.
Wie steht es eigentlich mit der Unterstützung von modernem Web Key Directory?
Meine Datenschutz und Privatsphäre Übersicht 2025, für Jedermann
als PDF Datei:
https://cryptpad.digitalcourage.de/file/#/2/file/v46BVMnJApavCdhArxdHCBxe/
#DSGVO #TDDDG #unplugtrump
#Datenschutz #Privatsphäre #sicherheit #Verschlüsselung #Adguard
#encryption #WEtell #SoloKey #NitroKey #Email #Cybersecurity #Pixelfed #Massenűberwachung #Leta
#Google #Metadaten #WhatsApp #Threema #Cryptpad #Signal
#Hateaid #Cyberstalking #Messenger #Browser #Youtube #NewPipe #Chatkontrolle #nichtszuverbergen #ÜberwachungsKapitalismus #Microsoft #Apple #Windows10 #Linux #Matrix #Mastodon #Friendica #Fediverse #Mastodir #Loops #2FA #Ransomware #Foss #VeraCrypt #HateAid #Coreboot #Volksverpetzer #Netzpolitik #OpenAndroidInstaller #Nobara
#Digitalisierung #FragdenStaat #Shiftphone #OpenSource #GrapheneOS #CCC #Mail #Mullvad #PGP #GnuPG #DNS #Gaming #linuxgaming #Lutris #Protondb #eOS #Enshittification
#Bloatware #TPM #Murena #LiberaPay #GnuTaler #Taler #PreppingforFuture
#FediLZ #BlueLZ #InstaLZ #ThreatModel
#FLOSS #UEFI #Medienkompetenz
#GnuPG's "public testing release series" has a new version 2.5.7.
https://lists.gnupg.org/pipermail/gnupg-announce/2025q2/000493.html
Remember:
* It is for you, if you want to test the new
post-quantum cryptography (PQC) features
or the 64 Bit Windows support.
* The series features Kyber (FIPS-203) as PQC encryption algorithm.
A new Gpg4win 5 Beta is forthcoming in the next days.
Technical details: https://dev.gnupg.org/T7671
The PGP Problem
https://www.latacora.com/blog/2019/07/16/the-pgp-problem/
#OpenPGP #GnuPG #PGP #GPG #PublicKey #Email
#AgeEncryption https://age-encryption.org
#Minisign https://jedisct1.github.io/minisign/
#AgePublicKey
age1s3n5ehvm8h3xjkc985hzjznw9cv0lk9ezj5heyy4m7l654rkzslq07ylps
#MinisignPublicKey
RWRK8XFYuCHjYX1J/7cKCUy6eQKNYVAurb/70Q6pK8kjGHALVORZGJ+o
I just released version 0.1.2 of rsop-oct, a stateless #OpenPGP ("SOP") CLI tool for use with OpenPGP card hardware devices:
https://crates.io/crates/rsop-oct/
Like its sibling project #rsop, rsop-oct is based on @rpgp
This update makes integration with https://crates.io/crates/openpgp-card-state optional.
rsop-oct can now implicitly use persisted PINs via openpgp-card-state, or explicitly provided ones via the standard SOP CLI parameter '--with-key-password'.
For more on #SOP, see https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/
I just released version 0.7.0 of #rsop, a stateless #OpenPGP ("SOP") CLI tool based on @rpgp:
https://crates.io/crates/rsop/
This version uses the new rPGP 0.16.0, with streaming message support.
It also comes with a number of bugfixes.
For more on #SOP, see https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/
If you are using the PDF viewer #Okular_from #Gpg4win, please upgrade to version 4.4.1 as this version fixes a severe vulnerability in the freetype library.
https://www.gpg4win.org/download.html
Vulnerability details:
https://euvd.enisa.europa.eu/enisa/EUVD-2025-6367
There are other good things in Gpg4win 4.4.1, for example
* improvements in the Outlook Add-in (GpgOL)
* a better Kleopatra
* GnuPG upgraded to v2.4.8
09.05.2025: GnuPG announces release of 2.5.6 for public testing, finalized PQC algorithms are supported.
Source: https://lists.gnupg.org/pipermail/gnupg-announce/2025q2/000492.html
PQC: https://wikipedia.org/wiki/Post-quantum_cryptography
GnuPG: https://mastodon.online/@blueghost/111974048270035570
Harvest now, decrypt later: https://mastodon.online/@blueghost/111357939714657018
Meine Datenschutz und Privatsphäre Übersicht 2025, für Jedermann
Teilen erbeten !
als PDF Datei:
https://cryptpad.digitalcourage.de/file/#/2/file/8os68Lk8YMPfPi1UvHYtTTQI/
#DSGVO #TDDDG ( #unplugtrump )
#Datenschutz #Privatsphäre #sicherheit #Verschlüsselung
#encryption #WEtell #SoloKey #NitroKey #Email #Cybersecurity #Pixelfed #Massenűberwachung #Leta
#Google #Metadaten #WhatsApp #Threema #Cryptpad #Signal
#Hateaid #Cyberstalking #Messenger #Browser #Youtube #NewPipe #Chatkontrolle #nichtszuverbergen #ÜberwachungsKapitalismus #Microsoft #Apple #Windows10 #Linux #Matrix #Mastodon #Friendica #Fediverse #Mastodir #Loops #2FA #Ransomware #Foss #VeraCrypt #HateAid #Coreboot #Volksverpetzer #Netzpolitik #OpenAndroidInstaller
#Digitalisierung #FragdenStaat #Shiftphone #OpenSource #GrapheneOS #CCC #Mail #Mullvad #PGP #GnuPG #DNS #Gaming #linuxgaming #Lutris #Protondb #eOS #Enshittification
#Bloatware #TPM #Murena #LiberaPay #GnuTaler #Taler #PreppingforFuture
#FediLZ #BlueLZ #InstaLZ #ThreatModel
#FLOSS #UEFI #Medienkompetenz
Neue Version von #GnuPG (v2.5.6) und eine weitere Beta-Version des kommenden #Gpg4Win 5.0 erschienen.
Wer Gpg4Win (noch) nicht kennt: Enthält u.a. das MS Outlook-Plugin GpgOL damit dort #OpenPGP-verschlüsselte Mails funktionieren, GpgEX damit man im Explorer Dateien verschlüsseln kann, oder die Schlüssel-/Zertifikats-Verwaltung Kleopatra. Mit 5.0 dann Post Quanten resistant encryption.
S/MIME gibt es natürlich auch. Das skaliert wegen der Kosten für die zusätzlich zeitlimitierten Zertifikate, in der Bevölkerung aber noch schlechter als OpenPGP. Deshalb plädiere ich für einen Fokus darauf um wenigstens hier eine größere Verbreitung zu schaffen.
Und von mir ein fettes Danke an den Hauptentwickler der Werkzeuge @DD9JN