fwiw
https://laanwj.github.io/2021/01/21/decentralize.html

@orionwl wonder if this would be a good time to try bip322 sigs for releases?

@ajtowns @orionwl No. PGP is far superior to any of these single key standards, as it supports the web-of-trust.

PGP could be better. But until someone actually replaces it, why use niche standards that will never replace it?

@pete @ajtowns right, replacing PGP is not the goal here

i think PGP as a system is fine, there's no better replacement for the entire thing, i have some qualms with gnupg implementation—e.g. that it still isn't a library, that programmatic clients have to resort to ambigious text parsing—but that doesn't mean the system itself was a bad idea