<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>GPG doesn't get a lot love because it has a lot of backwards
compatibility with algorithms that shouldn't be used any more and
the APIs and CLI tools are a mess of UX.</p>
<p><br>
</p>
<p>The second part is completely mitigated by using pass - you get a
simple, clear CLI interface that is almost impossible to mis-use.</p>
<p>The first part is partially on you: if you create a gpg key with
very weak encryption, you've got a problem. <br>
</p>
<p>But if you create a modern GPG key, you're perfectly fine. The
cryptography of modern algorithms in GPG is not part of that
debate as far as I know.<br>
</p>
<p><br>
</p>
<div class="moz-cite-prefix">On 8/29/19 11:24 AM, Sylvia Gough
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAP5gpg5LocQJ39EPT+GHYsCnEbSS-K1JKfX=uBrUQM=3XXjwSw@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">First, I'd like to thank Jason for all the amazing
crypto work he's been doing.<br>
<br>
Now to my question. I'm considering using pass as my password
manager, and security is obviously a top concern for this roll.
I know that pass is using GPG under the hood, and as far as I
can see GPG doesn't get much love among cryptographers[1][2].<br>
<br>
What's your opinion about this?<br>
<br>
[1]: <a
href="https://latacora.micro.blog/2019/07/16/the-pgp-problem.html"
moz-do-not-send="true">https://latacora.micro.blog/2019/07/16/the-pgp-problem.html</a><br>
[2]: <a
href="https://blog.filippo.io/giving-up-on-long-term-pgp/"
moz-do-not-send="true">https://blog.filippo.io/giving-up-on-long-term-pgp/</a><br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Password-Store mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Password-Store@lists.zx2c4.com">Password-Store@lists.zx2c4.com</a>
<a class="moz-txt-link-freetext" href="https://lists.zx2c4.com/mailman/listinfo/password-store">https://lists.zx2c4.com/mailman/listinfo/password-store</a>
</pre>
</blockquote>
</body>
</html>