The #OpenPGP ecosystem is moving forward with new certificate formats from RFC 9580, as well as upcoming #PQC support via https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/

We are working towards support for these modern certificate types on https://keys.openpgp.org

For this, we need to overhaul and extend our user-facing workflows, as well as the API that KOO exposes. The KOO board has decided to move forward based on the HKPv2 protocol:

https://datatracker.ietf.org/doc/draft-gallagher-openpgp-hkp/

🧵 1/2

The #OpenPGP ecosystem is moving forward with new certificate formats from RFC 9580, as well as upcoming #PQC support via https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/

We are working towards support for these modern certificate types on https://keys.openpgp.org

For this, we need to overhaul and extend our user-facing workflows, as well as the API that KOO exposes. The KOO board has decided to move forward based on the HKPv2 protocol:

https://datatracker.ietf.org/doc/draft-gallagher-openpgp-hkp/

🧵 1/2

The #OpenPGP ecosystem is moving forward with new certificate formats from RFC 9580, as well as upcoming #PQC support via https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/

We are working towards support for these modern certificate types on https://keys.openpgp.org

For this, we need to overhaul and extend our user-facing workflows, as well as the API that KOO exposes. The KOO board has decided to move forward based on the HKPv2 protocol:

https://datatracker.ietf.org/doc/draft-gallagher-openpgp-hkp/

🧵 1/2

Delta Chat is a messaging platform that works over email.

Setup is similar to a email client.
Messaging is decentralized and interoperable.

Supports end-to-end encryption via PGP.
PGP encryption keys are created automatically.

Default desktop client is based on Electron.
Electron is based on the Google Chromium web browser.

Website: https://delta.chat
Mastodon: @delta

#DeltaChat #Messaging #Privacy #InfoSec #E2EE #OpenPGP #PGP #OpenSource #FOSS #CyberSecurity #Encryption #FreeSoftware

I just released version 0.6.6 of rpgpie, an experimental high level API for @rpgp:

https://crates.io/crates/rpgpie

The rpgpie library crate ships with the (also experimental) "rpgp" CLI tool, which can inspect certificates (aka " #OpenPGP public keys") in two different ways:

- "show" prints the internal structure of a certificate without much interpretation
- "status" prints a summarized view, and applies OpenPGP validity semantics

Since this release, "status" can emit JSON.

🧵 1/5

#PGP #GnuPG

I just released version 0.6.6 of rpgpie, an experimental high level API for @rpgp:

https://crates.io/crates/rpgpie

The rpgpie library crate ships with the (also experimental) "rpgp" CLI tool, which can inspect certificates (aka " #OpenPGP public keys") in two different ways:

- "show" prints the internal structure of a certificate without much interpretation
- "status" prints a summarized view, and applies OpenPGP validity semantics

Since this release, "status" can emit JSON.

🧵 1/5

#PGP #GnuPG

New blog article: "Using a second #OpenPGP card for my primary key"

https://openpgp.foo/posts/2025-07-a-second-card/

This is a rather niche article, but I hope it will still contain some bits of interest, for at least some readers 🤓.

In it, I import my primary OpenPGP key onto a second OpenPGP card hardware device, and use the device to issue a third-party certification with rsop-oct.

I also outline some background and tradeoffs around different OpenPGP card setup.

#HSM #OpenPGPcard #GnuPG

New blog article: "Using a second #OpenPGP card for my primary key"

https://openpgp.foo/posts/2025-07-a-second-card/

This is a rather niche article, but I hope it will still contain some bits of interest, for at least some readers 🤓.

In it, I import my primary OpenPGP key onto a second OpenPGP card hardware device, and use the device to issue a third-party certification with rsop-oct.

I also outline some background and tradeoffs around different OpenPGP card setup.

#HSM #OpenPGPcard #GnuPG

I just released version 0.1.2 of rsop-oct, a stateless #OpenPGP ("SOP") CLI tool for use with OpenPGP card hardware devices:

https://crates.io/crates/rsop-oct/

Like its sibling project #rsop, rsop-oct is based on @rpgp

This update makes integration with https://crates.io/crates/openpgp-card-state optional.

rsop-oct can now implicitly use persisted PINs via openpgp-card-state, or explicitly provided ones via the standard SOP CLI parameter '--with-key-password'.

For more on #SOP, see https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/

#PGP #GnuPG

I just released version 0.7.0 of #rsop, a stateless #OpenPGP ("SOP") CLI tool based on @rpgp:

https://crates.io/crates/rsop/

This version uses the new rPGP 0.16.0, with streaming message support.
It also comes with a number of bugfixes.

For more on #SOP, see https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/

#PGP #GnuPG

I just released version 0.7.1 of #rsop, a stateless #OpenPGP ("SOP") CLI tool based on @rpgp:

https://crates.io/crates/rsop/

This version adds support for the "merge-certs" SOP command, which consolidates multiple versions of a certificate into a unified aggregate view.

For more on #SOP, see https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/

#PGP #GnuPG

I just released version 0.7.1 of #rsop, a stateless #OpenPGP ("SOP") CLI tool based on @rpgp:

https://crates.io/crates/rsop/

This version adds support for the "merge-certs" SOP command, which consolidates multiple versions of a certificate into a unified aggregate view.

For more on #SOP, see https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/

#PGP #GnuPG

I just released version 0.1.2 of rsop-oct, a stateless #OpenPGP ("SOP") CLI tool for use with OpenPGP card hardware devices:

https://crates.io/crates/rsop-oct/

Like its sibling project #rsop, rsop-oct is based on @rpgp

This update makes integration with https://crates.io/crates/openpgp-card-state optional.

rsop-oct can now implicitly use persisted PINs via openpgp-card-state, or explicitly provided ones via the standard SOP CLI parameter '--with-key-password'.

For more on #SOP, see https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/

#PGP #GnuPG

I just released version 0.7.0 of #rsop, a stateless #OpenPGP ("SOP") CLI tool based on @rpgp:

https://crates.io/crates/rsop/

This version uses the new rPGP 0.16.0, with streaming message support.
It also comes with a number of bugfixes.

For more on #SOP, see https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/

#PGP #GnuPG