Learn about Sequoia, our new OpenPGP implementation written in @rustlang, by watching my short presentation at the Delta X gathering describing our motivation, some of Sequoia's architectural details, and the project's status. youtube.com/watch?v=NBbtIZip…
I just released version 0.2 of Sequoia's Web of Trust engine including its sq-wot CLI. See the README for some examples. (Using your gpg keyring is just a --gpg away.) crates.io/crates/sequoia-wot#pgp#sequoia
I think sq-wot goes a long way to making the web of trust more usable by showing exactly why a binding is considered authentic. I'd be really happy about any feedback on how to make the output more understandable, and ideas for other queries that sq-wot should support.
We released v1.2 of the Octopus, an alternate OpenPGP backend for Thunderbird. The primary motivation is to track changes to how Thunderbird uses rnp. Thanks to our users for quickly reporting these changes! The Octopus is now under the LGPL. sequoia-pgp.org/blog/2021/12…#pgp
Recently, the Sequoia team made five short presentations about the future of Sequoia as part of an @NGIZero webinar. (Thanks for that!) For those of you who prefer reading text to watching a video, I've summarized the presentations in a blog post. sequoia-pgp.org/blog/2021/12…#pgp
What's going on with Sequoia? Thanks to @NGIZero, there is now a nice series of short presentations by the Sequoia team about what we are working on! #pgpyoutube.com/watch?v=RV1E_Djh…
In 2 hours (Today, 10 CET), we're going to present Sequoia at @NGIZero 's webinar on the future of OpenPGP. It's free and no registration is required. Join us! nlnet.nl/events/20211123/PGP…#pgp
In 24 hours (Tuesday, 10 CET), we're going to present Sequoia at @ngizero's webinar on the future of OpenPGP. It's free and no registration is required. Join us! nlnet.nl/events/20211123/PGP…#pgp
Neal: An introduction to Sequoia PGP
Wiktor: TPM support
Lars: Adding a JSON interface to sq
Justus: A gpg compatability layer
Heiko: OpenPGP CA, a federated, decentralized CA
Join us in 48 hours (Tuesday, 10 CET) at @NGIZero's webinar where we'll talk about the future of OpenPGP including Sequoia PGP! nlnet.nl/events/20211123/PGP…#pgp
I'll introduce Sequoia, Wiktor will present his work on adding TPM support, Justus will talk about gpg compatability, Lars will present his work on adding a JSON-based API to sq, and Heiko will talk about strengthening authentication with OpenPGP CA! sequoia-pgp.org#pgp
Want to hear about what's going on with Sequoia PGP? Tune in to NLNet's webinar on the future of OpenPGP on Tuesday, November 23 at 10 CET. We'll present Sequoia and the various projects that we're working on! nlnet.nl/events/20211123/PGP…
I'm a very reluctant (only when correspondent insists, thankfully rarely, because it's onerous) user of encrypted email. The pieces quoted in the blog post below made me feel better about my reluctance. But @nwalfield makes me think making encrypted email better is worthwhile.
Given that the continued use of email remains inevitable in the midterm, and that it is used for security-sensitive communication including account recovery, and privacy-related communication, not improving it is negligent.
Even if email cannot be protected from a powerful state adversary (although, I think tools designed with security in mind rather than bolted on later could), it makes sense to try to improve the status quo based only on defense in depth and harm reduction arguments.