PGP技术有着众多的问题,已经过时。

  1. The PGP problem
  2. What To Use Instead of PGP
  3. What’s the matter with PGP?

替换方案如下表:

类别工具名称备注
加密文件age支持后量子加密 (PQC)
rageage 的 Rust 实现版本
私人通信Signal端到端加密通讯
Wire端到端加密通讯
签署 GitSSH Signatures使用 Ed25519 算法
文件传输Magic Wormhole两台电脑之间加密传输
SSH + rsync云服务器上更常用
加密备份Tarsnap通常建议
Borg使用了合理的加密技术

请勿使用任何形式的邮件加密

Email is insecure. Even with PGP, it’s default-plaintext, which means that even if you do everything right, some totally reasonable person you mail, doing totally reasonable things, will invariably CC the quoted plaintext of your encrypted message to someone else (we don’t know a PGP email user who hasn’t seen this happen). PGP email is forward-insecure. Email metadata, including the subject (which is literally message content), are always plaintext.

Latacora article