PGP signatures on PyPI: worse than useless

@yossarian
PGP signatures: worse than useless.

There, I fixed it for you.

As tools GPG (and PGP) are simply unusable by anyone but fastidious zealot pedants. And thus always used wrong.

@glyph

@gpshead @yossarian @glyph I still have hope to fix the usability of tools/services in future. I know most of my friends totally lost all hope :)
@kushal @gpshead @yossarian the world needs more good signing and security tools, but the sooner you abandon GPG (and OpenPGP more broadly) the sooner you can start building those ;-). There's really nothing worth salvaging here.

@glyph @gpshead @yossarian I beg to differ on that point. @[email protected] & I are building https://tumpa.rocks/

Here is an example where we can have better UX focused tools in the #OpenPGP land.

Tumpa

Tumpa is a usability-minded OpenPGP desktop application that makes key management and smartcard controls easy and usable for everyone.

@kushal @gpshead @yossarian @saptaks agree to disagree, I guess.