<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[I&#x27;m getting quite annoyed with the state of #GnuPG as a packager.]]></title><description><![CDATA[<p>I'm getting quite annoyed with the state of <a href="https://chaos.social/tags/GnuPG" rel="tag">#<span>GnuPG</span></a> as a packager.</p><p>Upstream silently keeps releasing 2.2 versions to this day(!) and at the same time claims 2.4 will soon be EOL (also refuses to backport security fixes for it).</p><p>Meanwhile, there are no good reasons to upgrade to 2.5, unless one wants incompatibility with the entire rest of the ecosystem (see <a href="https://wiki.archlinux.org/index.php?title=GnuPG&amp;oldid=860217#OpenPGP_compatibility" rel="nofollow noopener"><span>https://</span><span>wiki.archlinux.org/index.php?t</span><span>itle=GnuPG&amp;oldid=860217#OpenPGP_compatibility</span></a>).</p><p>The move to <a href="https://chaos.social/tags/OpenPGP" rel="tag">#<span>OpenPGP</span></a> <a href="https://chaos.social/tags/RFC9580" rel="tag">#<span>RFC9580</span></a> compliant solutions can't happen early enough!<br />Also, I'm glad we have <span><a href="https://infosec.exchange/@freepg">@<span>freepg</span></a></span></p>]]></description><link>https://board.circlewithadot.net/topic/57f5bc38-7d14-4cf5-bd78-cb56e5707eed/i-m-getting-quite-annoyed-with-the-state-of-gnupg-as-a-packager.</link><generator>RSS for Node</generator><lastBuildDate>Thu, 30 Apr 2026 17:40:32 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/57f5bc38-7d14-4cf5-bd78-cb56e5707eed.rss" rel="self" type="application/rss+xml"/><pubDate>Fri, 24 Apr 2026 15:17:56 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to I&#x27;m getting quite annoyed with the state of #GnuPG as a packager. on Fri, 24 Apr 2026 16:13:13 GMT]]></title><description><![CDATA[<p><span><a href="/user/serebit%40floss.social">@<span>serebit</span></a></span> well, not necessarily.</p><p>We luckily have options for <a href="https://chaos.social/tags/OpenPGP" rel="tag">#<span>OpenPGP</span></a> outside of <a href="https://chaos.social/tags/GnuPG" rel="tag">#<span>GnuPG</span></a> <img src="https://board.circlewithadot.net/assets/plugins/nodebb-plugin-emoji/emoji/android/1f605.png?v=28325c671da" class="not-responsive emoji emoji-android emoji--sweat_smile" style="height:23px;width:auto;vertical-align:middle" title="😅" alt="😅" /></p>]]></description><link>https://board.circlewithadot.net/post/https://chaos.social/users/dvzrv/statuses/116460564865459922</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://chaos.social/users/dvzrv/statuses/116460564865459922</guid><dc:creator><![CDATA[dvzrv@chaos.social]]></dc:creator><pubDate>Fri, 24 Apr 2026 16:13:13 GMT</pubDate></item><item><title><![CDATA[Reply to I&#x27;m getting quite annoyed with the state of #GnuPG as a packager. on Fri, 24 Apr 2026 16:12:17 GMT]]></title><description><![CDATA[<p><span><a href="/user/dvzrv%40chaos.social">@<span>dvzrv</span></a></span> <span><a href="/user/freepg%40infosec.exchange">@<span>freepg</span></a></span> Time to switch to SSH signing!</p>]]></description><link>https://board.circlewithadot.net/post/https://floss.social/users/serebit/statuses/116460561220459487</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://floss.social/users/serebit/statuses/116460561220459487</guid><dc:creator><![CDATA[serebit@floss.social]]></dc:creator><pubDate>Fri, 24 Apr 2026 16:12:17 GMT</pubDate></item><item><title><![CDATA[Reply to I&#x27;m getting quite annoyed with the state of #GnuPG as a packager. on Fri, 24 Apr 2026 16:06:09 GMT]]></title><description><![CDATA[<p><span><a href="/user/letoams%40defcon.social">@<span>letoams</span></a></span> <span><a href="/user/dvzrv%40chaos.social">@<span>dvzrv</span></a></span> <span><a href="/user/freepg%40infosec.exchange">@<span>freepg</span></a></span> <span><a href="/user/hko%40floss.social">@<span>hko</span></a></span> on linux maybe, but not on windows...</p>]]></description><link>https://board.circlewithadot.net/post/https://mastodon.ie/users/andrewg/statuses/116460537103987625</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://mastodon.ie/users/andrewg/statuses/116460537103987625</guid><dc:creator><![CDATA[andrewg@mastodon.ie]]></dc:creator><pubDate>Fri, 24 Apr 2026 16:06:09 GMT</pubDate></item><item><title><![CDATA[Reply to I&#x27;m getting quite annoyed with the state of #GnuPG as a packager. on Fri, 24 Apr 2026 16:03:10 GMT]]></title><description><![CDATA[<p><span><a href="/user/letoams%40defcon.social">@<span>letoams</span></a></span> <span><a href="/user/dvzrv%40chaos.social">@<span>dvzrv</span></a></span> <span><a href="/user/freepg%40infosec.exchange">@<span>freepg</span></a></span> It's certainly not in a good place.</p><p>But it does seem determined to drag the rest of OpenPGP down, with its weird antics.</p>

<div class="row mt-3"><div class="col-12 mt-3"><img class="img-thumbnail" src="https://cdn.masto.host/floss/media_attachments/files/116/460/512/285/547/163/original/3306714a37c1b0ff.webp" alt="Link Preview Image" /></div></div>]]></description><link>https://board.circlewithadot.net/post/https://floss.social/users/hko/statuses/116460525344914889</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://floss.social/users/hko/statuses/116460525344914889</guid><dc:creator><![CDATA[hko@floss.social]]></dc:creator><pubDate>Fri, 24 Apr 2026 16:03:10 GMT</pubDate></item><item><title><![CDATA[Reply to I&#x27;m getting quite annoyed with the state of #GnuPG as a packager. on Fri, 24 Apr 2026 15:58:27 GMT]]></title><description><![CDATA[<p><span><a href="/user/dvzrv%40chaos.social">@<span>dvzrv</span></a></span> <span><a href="/user/freepg%40infosec.exchange">@<span>freepg</span></a></span> <span><a href="/user/hko%40floss.social">@<span>hko</span></a></span> gnupg is dead</p>]]></description><link>https://board.circlewithadot.net/post/https://defcon.social/users/letoams/statuses/116460506811627687</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://defcon.social/users/letoams/statuses/116460506811627687</guid><dc:creator><![CDATA[letoams@defcon.social]]></dc:creator><pubDate>Fri, 24 Apr 2026 15:58:27 GMT</pubDate></item><item><title><![CDATA[Reply to I&#x27;m getting quite annoyed with the state of #GnuPG as a packager. on Fri, 24 Apr 2026 15:20:19 GMT]]></title><description><![CDATA[<p><span><a href="https://chaos.social/@dvzrv">@<span>dvzrv</span></a></span> what a mess. Thank you so much for your hard work!</p>]]></description><link>https://board.circlewithadot.net/post/https://infosec.exchange/users/mklovenotcyber/statuses/116460356868682316</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://infosec.exchange/users/mklovenotcyber/statuses/116460356868682316</guid><dc:creator><![CDATA[mklovenotcyber@infosec.exchange]]></dc:creator><pubDate>Fri, 24 Apr 2026 15:20:19 GMT</pubDate></item></channel></rss>