@nwalfield@mastodon.social
@nwalfield@mastodon.social avatar

nwalfield

@nwalfield@mastodon.social

I work on Sequoia, a project to improve the OpenPGP ecosystem.

Antifa. Pro democracy. Pro positive and negative liberty.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

kubikpixel, to rust
@kubikpixel@chaos.social avatar

Do any of you developers know what the Server @stalwartlabs uses for an solution – Is it or even Sequoia--PGP? 🤔

I would like to use @sequoiapgp on the basis of personal arguments and this E-Mail 🔐📧

nwalfield,
@nwalfield@mastodon.social avatar
nwalfield, to random
@nwalfield@mastodon.social avatar

We're trying to polish sq, Sequoia #PGP's CLI, in preparation for our 1.0 release this summer. One place we could use some help is with the CLI's UX: are the subcommands and options sane, and consistent? Also, we want to provide guidance so that user's don't need to memorize workflows, but are nudged along. See for instance: https://gitlab.com/sequoia-pgp/sequoia-sq/-/issues/221 If you are interested in helping, please reach out!

nwalfield, to random
@nwalfield@mastodon.social avatar

My talk "Sequoia PGP: Rethinking OpenPGP Tooling" including an Ode to Werner (@DD9JN) and (@GnuPG) has been released. I'm happy to receive constructive feedback, both positive and negative! https://fosdem.org/2024/schedule/event/fosdem-2024-3297-sequoia-pgp-rethinking-openpgp-tooling/

ifixcoinops, to random
@ifixcoinops@retro.social avatar

I cannae draw.

It's always bothered me that I can't draw. I have dyspraxia pretty bad and was the crappiest artist in my whole year at school, and I kinda shrugged and went "Guess I'll write instead" and just sort of bimbled through life making text adventures and fixing coin-ops, but it's always nagged at me that I can't draw, and my kid's been asking me "Dad how do you draw a cat" and I'm like "You're six and you already draw better than me," and I'm 40 now and wanna put some time in this year towards not sucking quite so much at this.

Anyone got a rec for a good absolute-beginner guide? Like, sub-beginner even, think Small Child Level because I wasn't kidding when I said my 6-year-old draws better than me

nwalfield,
@nwalfield@mastodon.social avatar

@ifixcoinops In terms of small child level, I highly recommend the art hub for kids YouTube channel. The artist sits with one of his kids, and describes how to draw something. One step at a time, he draws, the kid draws, and you draw. It's so simple, and yet surprisingly satisfying. He's not explicit about the techniques he uses, but after a few videos, I figured some out, and am able to apply them on my own. Also, I had fun with my kids.

nwalfield, to random
@nwalfield@mastodon.social avatar

The first release of PGP was 32 years ago today! Wow!

nwalfield, to random
@nwalfield@mastodon.social avatar

I'll be giving a talk at 19.00 this evening (Wednesday, May 24) in Zurich at CCCZH@Bitwäscherei: "Sequoia PGP: Pretty Good Public Key Infrastructure" on , web of trust, and the tools we are building to make authentication easier. A screenshot below. (Come a bit earlier as the entrance is hard to find.) https://www.ccczh.ch/hackerspace/

nwalfield,
@nwalfield@mastodon.social avatar

The presentation went well. Thanks to everyone who came and the excellent questions and feedback!

mgorny, to rust

I've missed my train (the first time in years!) while debugging the latest issue. This is honestly the single worst piece of software ever written.

They reinvent every single thing and they do it badly. When you try to make it work for everyone (i.e. make it use system resolver and honor proxies), it just falls apart.

I would consider making use , except that discriminates against even more users than GPG bugs do.

https://bugs.gentoo.org/906875

nwalfield,
@nwalfield@mastodon.social avatar

@mgorny What issues are you worried about with rust? I'm aware of several common concerns. Here, I'm primarily interested in the ones that you care about.

If you are worried about portability to less popular architectures, and your requirements are relatively high level, then what about using the SOP interface, for which there are about 8 implementations? FWIW, dpkg uses the user's preferred sop implmentation, for instance.

https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/

nwalfield,
@nwalfield@mastodon.social avatar

@mgorny SOP currently only works with curated ("trusted") keyrings. If you want to verify something, you give SOP a list of certificates and if one of them can verify the signature, then the signature is considered to be authenticated

SOP is used by https://tests.sequoia-pgp.org, but it now occurs to me that the SOP implementation for gpgme is written in Rust 😬. https://gitlab.com/sequoia-pgp/gpgme-sop

nwalfield,
@nwalfield@mastodon.social avatar

@mgorny As for SOP not supporting some use case, it would be helpful to write that down and report it to dkg. He's actively looking to improve that API. https://gitlab.com/dkg/openpgp-stateless-cli

nwalfield,
@nwalfield@mastodon.social avatar

@mgorny I hear you!

thunderbird, to random
@thunderbird@mastodon.online avatar

Yesterday we published our 2022 Financial Report. When people saw Thunderbird raised $6.4M in 2022 from donations, one question was asked frequently: "Do you have mega-donors?"

Nope. We just have awesome people 💙

Some stats we didn't publish in the report:

-We had 76 donations that were $500 or above, which is less than 1% of total donations.

-95% of our donations were less than $100.

-The largest donation was €3000.

-Our average donation amount $15.78.

Thank you family!

nwalfield,
@nwalfield@mastodon.social avatar

@thunderbird Is the average the mean or the median? Could you share the quartiles? Are the donations repeating or one time? If they are a mix, can you provide separate statistics?

nwalfield, to random
@nwalfield@mastodon.social avatar

RPM uses OpenPGP to protect software updates. In the fall of 2022, it switched from using its own internal OpenPGP implementation to Sequoia. Last week, Fedora 38 was released with a version of RPM that uses Sequoia. I've written about the 1.5 year journey in a blog post.

https://sequoia-pgp.org/blog/2023/04/27/rpm-sequoia/

  • All
  • Subscribed
  • Moderated
  • Favorites
  • JUstTest
  • kavyap
  • DreamBathrooms
  • thenastyranch
  • magazineikmin
  • InstantRegret
  • GTA5RPClips
  • Youngstown
  • everett
  • slotface
  • rosin
  • osvaldo12
  • mdbf
  • ngwrru68w68
  • megavids
  • cubers
  • modclub
  • normalnudes
  • tester
  • khanakhh
  • Durango
  • ethstaker
  • tacticalgear
  • Leos
  • provamag3
  • anitta
  • cisconetworking
  • lostlight
  • All magazines