yossarian (1.3.6.1.4.1.55738)PGP signatures on PyPI: worse than useless
https://blog.yossarian.net/2023/05/21/PGP-signatures-on-PyPI-worse-than-useless
Aurora Penguin@yossarian as someone who had to maintain my old job's pgp stuff because banks still use pgp to encrypt files sent to us, I very much hate it
Has any progress been made on replacing pgp for signing? Git also has this problem where there really should be something better to do signature verification but I haven't really seen anything
Kushal Das 
🇸🇪@aurorapenguin @yossarian You can use your ssh key for git signing. https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification#ssh-commit-signature-verification
