<story><title>OpenPGP Best Practices</title><url>https://we.riseup.net/riseuplabs+paow/openpgp-best-practices</url><text></text></story><parent_chain></parent_chain><comment><author>malandrew</author><text>So one thing I don&amp;#x27;t get about PGP keys: If they are such a great solution, why isn&amp;#x27;t PGP built into Linux as a core service? I&amp;#x27;m not talking about simply having it available as one of the standard packages. Instead I&amp;#x27;m talking about making it standard in tons of normal interactions. For example, the setup process for any new machine should require the creation of a PGP key specific to that machine. By adding this step, ever other application or service on the machine can go ahead and assume the existence of a private&amp;#x2F;public keypair specific to that machine. This opens up the opportunity for people to create applications that use public key exchange with the outside world as a given and therefore a reasonable default before passwords.&lt;p&gt;I would love it if the .ssh folder was also protected by default so that I would know if any application every accessed it, I would be notified. I know they are supposed to have permission 600 and normally won&amp;#x27;t be trusted if they don&amp;#x27;t. Because of this, I&amp;#x27;ve always thought it odd that they aren&amp;#x27;t created with the correct permissions by default, instead of requiring you to explicitly change it. I&amp;#x27;ve also always thought it odd the .ssh folder and files just as the .netrc file are not encrypted secure files by default that always require a password to access or at least require a password to access at least once every 5 minutes or so (like is sometimes required when running another sudo command past a certain threshold.&lt;p&gt;If one of the Linux distros never take the lead here, it would be sweet if OS X were one of the first ones to lead the way on legitimizing public&amp;#x2F;private key generation and exchange by making it much easier, but still secure.</text></comment>
<story><title>OpenPGP Best Practices</title><url>https://we.riseup.net/riseuplabs+paow/openpgp-best-practices</url><text></text></story><parent_chain></parent_chain><comment><author>pankkake</author><text>And submit your key to Phuctor: &lt;a href=&quot;http://nosuchlabs.com/&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;nosuchlabs.com&amp;#x2F;&lt;/a&gt;</text></comment>