Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://chaos.social/users/hpk/statuses/115810829319020942">holga (hpk@chaos.social)'s status on Wednesday, 31-Dec-2025 08:55:30 JST</a><a href="https://chaos.social/@hpk" title="hpk@chaos.social"><img src="https://gnusocial.jp/avatar/139134-48-20251030105716.webp" width="48" height="48" alt="holga" style="position: absolute; left: 0; top: 0;">holga</a><div><a href="https://furry.engineer/@soatok/115808748322802252" rel="in-reply-to">in reply to</a><ul><li></ul></div></section><article><p><a href="https://furry.engineer/@soatok">@soatok</a> Why do the failures of gpg imply that openpgp and rfc9580 are bad?  Have you looked at modern ways of doing openpgp and email like <a href="https://chatmail.at" rel="nofollow">https://chatmail.at</a> does it?  <br>See also <a href="https://chaos.social/@delta/115796626066185436" rel="nofollow">https://chaos.social/@delta/115796626066185436</a></p><p>There are also many broken ways to implement signal protocols but they are not useful as examples for discrediting signal.</p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/6005024#notice-11819906">In conversation</a><time datetime="2025-12-31T08:55:30+09:00" title="Wednesday, 31-Dec-2025 08:55:30 JST">about 6 months ago</time> <span>from <span><a href="https://chaos.social/@hpk/115810829319020942" rel="external" title="Sent from chaos.social via ActivityPub">chaos.social</a></span></span><a href="https://chaos.social/@hpk/115810829319020942">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: chatmail.at</div><h5><a href="https://chatmail.at/">Chatmail</a></h5><div></div></header><div>Chatmail provides FOSS infrastructure  for interoperable, secure, speedy and reliable end-to-end encrypted messaging. Check out clients as Arcane Chat, Bots or Delta Chat today!</div><footer></footer></article></li><li><article><header><div>No result found on File_thumbnail lookup.</div><h5><a href="https://chaos.social/@delta/115796626066185436There">Delta Chat (@delta@chaos.social)</a></h5><div> from <span>Delta Chat</span></div></header><div>Relax 😎!  GPG is not OpenPGP!Yesterday, vulnerabilities were published https://gpg.fail but they don't  affect #deltachat or other #chatmail clients becauseA) We never used #gnupg for anything; we use the modern #rustlang #openpgp implementation @rpgp@mastodon.social, security audited multiple times.B) #openpgp is fine, as modernized in #RFC9580, which already warns against several #gpgfail issues (gpg didn't implement that spec)Please spread the word that #gpg is not #openpgp ... Thanks! #39c3</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
holga (hpk@chaos.social)'s status on Wednesday, 31-Dec-2025 08:55:30 JSTholga
in reply to
- Soatok Dreamseeker
@soatok Why do the failures of gpg imply that openpgp and rfc9580 are bad? Have you looked at modern ways of doing openpgp and email like https://chatmail.at does it?
See also https://chaos.social/@delta/115796626066185436
There are also many broken ways to implement signal protocols but they are not useful as examples for discrediting signal.
In conversationabout 6 months ago from chaos.socialpermalink
Attachments
1. Domain not in remote thumbnail source whitelist: chatmail.at
  Chatmail
  Chatmail provides FOSS infrastructure for interoperable, secure, speedy and reliable end-to-end encrypted messaging. Check out clients as Arcane Chat, Bots or Delta Chat today!
2. No result found on File_thumbnail lookup.
  Delta Chat (@delta@chaos.social)
  from Delta Chat
  Relax 😎! GPG is not OpenPGP! Yesterday, vulnerabilities were published https://gpg.fail but they don't affect #deltachat or other #chatmail clients because A) We never used #gnupg for anything; we use the modern #rustlang #openpgp implementation @rpgp@mastodon.social, security audited multiple times. B) #openpgp is fine, as modernized in #RFC9580, which already warns against several #gpgfail issues (gpg didn't implement that spec) Please spread the word that #gpg is not #openpgp ... Thanks! #39c3

Public

Embed Notice

HTML Code

Corresponding Notice