lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <9fbb364c46d4affdadec7702c4c0e8987f7dae03.camel@pbarker.dev>
Date: Wed, 03 Sep 2025 09:37:28 +0100
From: Paul Barker <paul@...rker.dev>
To: Konstantin Ryabitsev <konstantin@...uxfoundation.org>, Jonathan Corbet
	 <corbet@....net>
Cc: workflows@...r.kernel.org, linux-doc@...r.kernel.org, 
	linux-kernel@...r.kernel.org
Subject: Re: [PATCH] Documentation: update maintainer-pgp-guide for latest
 best practices

On Tue, 2025-09-02 at 11:44 -0400, Konstantin Ryabitsev wrote:
> Freshen up the maintainer PGP guide:
> 
> - Bump minimum GnuPG version requirement from 2.2 to 2.4, since 2.2 is
>   no longer maintained
> - All major hardware tokens now support Curve25519, so remove outdated
>   ECC support callouts
> - Update hardware device recommendations (Nitrokey Pro 2 -> Nitrokey 3)
> - Broaden backup media terminology (USB thumb drive -> external media)
> - Update wording to follow vale's linter recommendations
> - Various minor wording improvements for clarity
> 
> Signed-off-by: Konstantin Ryabitsev <konstantin@...uxfoundation.org>

In the last couple of months I moved my private keys onto a new Yubikey device,
mostly following the kernel maintainer PGP guide. I read through the guide, and
some other sources [1] [2] [3], in detail before I started. So I think I'm well
placed to review these changes. They LGTM!

Reviewed-by: Paul Barker <paul@...rker.dev>

[1]: https://github.com/drduh/YubiKey-Guide
[2]: https://support.yubico.com/hc/en-us/articles/360013790259-Using-Your-YubiKey-with-OpenPGP
[3]: https://github.com/lfit/itpol/blob/master/protecting-code-integrity.md

-- 
Paul Barker

Download attachment "signature.asc" of type "application/pgp-signature" (253 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ