Skip to main content
Jonathan Cross's user avatar
Jonathan Cross's user avatar
Jonathan Cross's user avatar
Jonathan Cross
  • Member for 11 years, 7 months
  • Last seen more than a month ago
51 votes
2 answers
14k views

Who owns the gpg key 4AEE18F83AFDEB23 and how did it sign a commit in my GitHub repo?

9 votes
1 answer
1k views

Is the OpenPGP implementation of the YubiKey 4 Open Source?

5 votes
2 answers
3k views

Why do I see "Secret key is available." in gpg when it is not?

5 votes
1 answer
178 views

Best practice: Should I revoke an identity self-signed using SHA1?

4 votes
0 answers
1k views

How do security properties of Trezor's FIDO U2F differ from Yubikey?

3 votes
1 answer
6k views

Do PKCS #11 keyfiles on a yubikey actually improve security for Veracrypt?

3 votes
2 answers
208 views

What are the benefits to adding a bitcoin blockhash UID notation to one's OpenPGP key?

3 votes
1 answer
519 views

Are IBM PowerPC CPUs free of the AMT issue seen with AMD and Intel?

3 votes
1 answer
476 views

Are there any known collisions of a "long" (64 bit) OpenPGP key ID?

2 votes
2 answers
603 views

How might one verify that the POWER9 CPU does not contain an AMT-style subsystem?

1 vote
1 answer
326 views

Web of trust and signature types? (sig1, sig2, etc)

0 votes
0 answers
200 views

Can the Android "Always-on" VPN setting be relied upon to route all traffic through VPN?

0 votes
1 answer
573 views

secp256k1 GPG key?

0 votes
1 answer
225 views

Why isn't PGP used to authenticate with keyservers?

0 votes
1 answer
1k views

Does gpg --digest-algo have any effect when verifying a signature?