It is not the idea of GPG thats bad. In fact, the idea is great! The implementat... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

StrauXX 76 days ago | parent | context | favorite | on: Social engineering takeovers of open source projec...

It is not the idea of GPG thats bad. In fact, the idea is great! The implementation of GPG however is quite another thing. Ease of use and user experience are really not that great with GPG. It is difficult to use even for developers. Developers are users too amd so on.

guappa 76 days ago [–]

Try uploading a signed package on pypi. Sign it with sequoia instead of GPG if you like.

You'll receive an email asking you to stop uploading signatures.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact