For decades, GPG (GNU Privacy Guard) has been the go-to tool for secure messaging, signing, and encryption. But let’s be honest—GPG is a pain to use. Key management is clunky, revocation is a mess, and for the average user, it's just too complicated.But what if we had something simpler, more flexible, and designed for the modern internet?Nostr’s subkey model could provide a better, decentralized alternative to GPG while keeping the core benefits: strong cryptographic identity, multi-device support, and easy verification.
pull down to refresh
related posts
36 sats \ 1 reply \ @k00b 26 Feb
I mentioned it to @melvincarvalho on nostr, but I’ve always wondered if it might make more sense to use HD keys and just provide derivation proofs when needed.
Publishing and finding more notes seems to have more moving parts than necessary.
reply
100 sats \ 0 replies \ @melvincarvalho 26 Feb
Yes, there is definitely potential for a deterministic KDF such as a an HD Wallet. The current spec is only a first draft. We can and should add a paragraph on subkey derivation.
reply
143 sats \ 0 replies \ @petertodd 27 Feb
“GPG: Trust centralized keyservers (hope they work)
Nostr: Just use relays—they handle distribution”
This is utterly idiotic. Keyservers are no more centralized than nostr relays. Less in practice as keyservers had a way to synchronize with each other, so anyone could run one usefully.
The author does not understand how GPG/PGP works.
reply