Embed Notice

I think 2026 should be the year that we make PGP irrelevant.

Not just GnuPG (Koch's implementation), but the entire OpenPGP ecosystem.

Most cryptographers I talk to gave up on PGP over a decade ago.

(After seeing the arrogance and dismissiveness that bled through Koch's oss-security email, who can blame them?)

If you're a country whose government mandates the use of PGP, even in obscure places, let's talk about how to replace PGP.