There's broad availability of signify packages outside of OpenBSD including in Alpine Linux as outils-signify, Arch Linux as signify, Debian (even in stable) as signify-openbsd, NixOS as signify and also elsewhere. This has been planned for years and couldn't be delayed anymore.
-
-
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
May I know whats the technical reason behind using signify as opposed to GPG?
-
It's overly complex with far too much attack surface and has egregiously bad usability and security. It's only suitable for usage as a case study in how not to design and implement software. Rather than changing the instructions to work around GPG deficiencies, it won't be used.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.