linux-kernel - Re: [PATCH] Documentation: update maintainer-pgp-guide for latest best practices

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <9fbb364c46d4affdadec7702c4c0e8987f7dae03.camel@pbarker.dev>
Date: Wed, 03 Sep 2025 09:37:28 +0100
From: Paul Barker <paul@...rker.dev>
To: Konstantin Ryabitsev <konstantin@...uxfoundation.org>, Jonathan Corbet
	 <corbet@....net>
Cc: workflows@...r.kernel.org, linux-doc@...r.kernel.org, 
	linux-kernel@...r.kernel.org
Subject: Re: [PATCH] Documentation: update maintainer-pgp-guide for latest
 best practices

On Tue, 2025-09-02 at 11:44 -0400, Konstantin Ryabitsev wrote:
> Freshen up the maintainer PGP guide:
> 
> - Bump minimum GnuPG version requirement from 2.2 to 2.4, since 2.2 is
>   no longer maintained
> - All major hardware tokens now support Curve25519, so remove outdated
>   ECC support callouts
> - Update hardware device recommendations (Nitrokey Pro 2 -> Nitrokey 3)
> - Broaden backup media terminology (USB thumb drive -> external media)
> - Update wording to follow vale's linter recommendations
> - Various minor wording improvements for clarity
> 
> Signed-off-by: Konstantin Ryabitsev <konstantin@...uxfoundation.org>

In the last couple of months I moved my private keys onto a new Yubikey device,
mostly following the kernel maintainer PGP guide. I read through the guide, and
some other sources [1] [2] [3], in detail before I started. So I think I'm well
placed to review these changes. They LGTM!

Reviewed-by: Paul Barker <paul@...rker.dev>

[1]: https://github.com/drduh/YubiKey-Guide
[2]: https://support.yubico.com/hc/en-us/articles/360013790259-Using-Your-YubiKey-with-OpenPGP
[3]: https://github.com/lfit/itpol/blob/master/protecting-code-integrity.md

-- 
Paul Barker

Download attachment "signature.asc" of type "application/pgp-signature" (253 bytes)