Whatitat90

The sample page is more interesting: https://metacode.biz/openpgp/key#0x6A957C9A9A9429F7

Here's the source: https://github.com/wiktor-k/openpgp-proofs#openpgp-proofs

This only illustrates the point that centralizing server infrastructure and operations in one jurisdiction can quickly backfire.

That's what I was looking for, thanks!

Why do you think asciidoc is better than Markdown? Serious question as quick skim over the homepage (https://asciidoctor.org/) and it looks just like Markdown with different sigils.

Arch Linux, AsciiDoc, git - sounds great! But why keybase? (Serious question, I wonder if it's for communication or sharing encrypted data or...)

I'd advise checking the server at: https://compliance.conversations.im/old/

It seems Santa struck back the original issue author: https://github.com/Christian-Schiffer/servicelayer.chat/issu...

> only VLC player can make use of VAAPI

And mpv with "hwdec=vaapi" in ~/.config/mpv/mpv.conf

If you've already signed to Google but your session is stale it automatically redirects to login screen.

In private window it just works but still I consider the design of checking login on a page that doesn't require it quite bad.

The post is well-written and summarizes I think most major pain-points with PGP.

Comparison of all these tools to GnuPG is valid and it clearly shows not only implementation problems but design ones as well in gpg.

What I fear is future riddled with all these incompatible tools. Even if they're written by brilliant engineers and cryptographers they are not standards (e.g. IETF standards). Why is that important? For example rewriting libsignal from scratch (for example to publish it under permissive licenses) can be problematic [0].

[0]: https://news.ycombinator.com/item?id=12056673

Having to log in to Google just to read a message on a mailing list always creeps me out. Every time I see it it looks like a phishing attempt :-/

> I have my own domain, so maybe OPENPGPKEY record in my domain as well

> DNS-Based Authentication of Named Entities (DANE) Bindings for OpenPGP

WKD has some benefits over OPENPGPKEY - it keeps the request confidential (as WKD uses plain HTTPS). WKD is just easier to get right, that's why it's more broadly supported. GnuPG, that supports both of them, defaults to WKD. If OPENPGPKEY request is made it seems GnuPG doesn't even validate DNSSEC signatures: https://lists.gnupg.org/pipermail/gnupg-users/2011-December/...

> Part of the reason I changed my email is because I had in the past submitted a few keys to the sks network which I lost the private keys to, they were also submitted with an infinite expiry. I was a stupid kid.

That's why most recent versions of GnuPG automatically create keys with expiry set to 2 years.

> She was asked by David Hilbert to work on the problem of invariants in General Relativity, came up with one of the most important theorems in physics, and then moved on to other (extremely important) mathematical work.

Interestingly I just read about this in a Lawrence M. Krauss book [0] where it was described that David Hilbert insisted on hiring Noether by the university but was overruled by the male majority that didn't like the idea that a female would teach male students. Hilbert commented that "this is university, not a bath-house!" [1].

[0]: I think it was "The Greatest Story Ever Told—So Far"

[1]: I'm writing that from memory so excuse some inaccuracies.

SystemD definitely spurred some controversies years ago but is it that bad in 2019?

All major distros adopted it and even some that are listed there as "no systemd" in reality just give you choice (e.g. Gentoo).

I'd gladly hear the opinion of distro maintainers why did they switch to SystemD if it's as bad as it looks like in people's perception.

There are also these kinds of slip ups: https://news.ycombinator.com/item?id=18234849

For those who want to know why it still should be federated: https://gultsch.de/objection.html

It's interesting that you compare Riot with Conversations as Conversations feels and looks much better to me (native UI) while Riot for Android always gave me the webapp feel. But Riot works consistently on all OSes while Conversations (in my opinion the best free/federated messenger to date) is available only on Android.

That means their servers cannot be directly accessed but since they're based in Australia the company can be compelled to install decryption software without notifying anyone.

Source: https://www.youtube.com/watch?v=eW-OMR-iWOE

I wonder what oddities lie in Linus Torvalds' "perkeleen vittupää" (https://lkml.org/lkml/2013/7/13/132).

Very cool! I'll definitely watch you home page for new posts. Thank you :)

This sounds exciting! But I guess this is closed system and it's not possible to see at least a screenshot?

Prosody is small and works for most people. Ejabberd is what powers production servers of bigger operators, it's also used in MMORPGs.

> So good. Thanks Mr. Gultsch[0] !

It's interesting to look back at the role Mr. Gultsch played in this XMPP revival. He correctly identified features missing or present in other messengers (e.g. offline files or good mobile connectivity), wrote appropriate specs (e.g. [0]) and made sure they went through XSF, implemented them in his client, helped implement it in other clients and implemented some of them in servers, or procured server developers to do so. Then he made sure that server administrators have an easy way to check compliance that ultimately led to SSLLabs-like online checker [1] that was a GSOC project that he also mentored.

Quicksy was conceived to test if the idea of phone number-based contact discovery would bring more people to XMPP. He's not just talking about stuff, he's actually implementing his ideas to check if they work!

This proactive approach is something that truly amazes me, especially when the default response of many people is cynicism and ranting that "the world is bad".

I don't want to downplay role of other people here but I'm 100% sure if it wasn't for Daniel's involvement we wouldn't be talking about XMPP today.

[0]: https://xmpp.org/extensions/xep-0363.html

[1]: https://compliance.conversations.im/

Matrix, a competitor to XMPP is 4 years old [0].

[0]: https://en.wikipedia.org/wiki/Matrix_(protocol)

Conversations reached a point where I can easily install it on my family member phones and they feel it's a "normal" messenger. This doesn't sound like a high bar to reach but surprisingly it didn't happen before (at least for XMPP).

Recently a spin-off of Conversations - Quicksy was introduced [0] [1] that makes the entry even easier as it offers phone number-based contact discovery. From my experience people are used to quick on-boardings and don't even want to think about things like "username" and looking for contacts.

[0]: https://quicksy.im/

[1]: https://play.google.com/store/apps/details?id=im.quicksy.cli...