Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Not only can it do all the ssh-agent operations

It can not. Doesn't work with PKCS#11 PIV. In general GPG's behavior with SmartCards is idiotic and interferes with many other applications.

It's good that people don't use GPG more often and I can just purge it from my systems.



What do you mean? I use GPG with SSH (or SSH with GPG) all the time, and I need gpg-agent for that. GPG's agent replaces ssh-agent and serves SSH keys derived from your GPG key.

Can you do this with Age? If not, then I am going to stick to GPG.


I'm unsure what was unclear. It simply does not provide PIV support and it interferes with other software that wants to utilise SmartCards.

Can Age interfere with all SmartCard usage? No clue.


Oh well, let us just agree on that comparing Age to GPG is silly, ergo "Switching from GPG to Age" is silly, unless it is "Switching from GPG to Age for file encryption".

Age doesn't do signing, key infrastructure, or email. Minisign/signify only sign. None are GPG replacements. They're partial feature subsets that are simpler because they do less.

So, to summarize these tools:

- Age: Only does file encryption, no signing, no key management infrastructure, no email integration

- Minisign/Signify: Only signing, no encryption

- GPG: Encryption, signing, key management, email integration, multiple recipients, subkeys, revocation certificates, web of trust (even if unused), smart card support, etc.

You cannot just simply switch from GPG to Age unless you are only doing file encryption. If this is the case, then sure, you can.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: