Skip to Content [alt-c]

Comment

In reply to Comment by Anonymous

Reader JPG on 2024-10-11 at 16:02:

Perhaps you could create a short bash alias that wraps the commands for you so that you can feel safe and secure? I believe this has been a feature of shells since 1997? .sig is used by lots of other applications too. At least three are listed on https://fileinfo.com/extension/sig and none of them are PGP or Kleopatra.

PKCS#7 is fine but old and nothing supports it other than Windows to store key data in--not for signatures. It was never widely adopted for signatures and I can't think of a single library that supports it.

This is widely used by GitHub now for signing as an alternative to PGP. The namespacing in particular is important as git uses a specific namespace and thus isn't weird and is definitely being used now "in the wild."

Reply

Post a Reply

Your comment will be public. To contact me privately, email me. Please keep your comment polite, on-topic, and comprehensible. Your comment may be held for moderation before being published.

(Optional; will be published)

(Optional; will not be published)

(Optional; will be published)

  • Blank lines separate paragraphs.
  • Lines starting with > are indented as block quotes.
  • Lines starting with two spaces are reproduced verbatim (good for code).
  • Text surrounded by *asterisks* is italicized.
  • Text surrounded by `back ticks` is monospaced.
  • URLs are turned into links.
  • Use the Preview button to check your formatting.