PGP signatures on PyPI: worse than useless 3 years ago
Snowden used gpg and taught it to non-programmers:
https://theintercept.com/2014/10/28/smuggling-snowden-secret...
I'm surprised by the number of people who say that gpg is insecure. Is it disliked because it is decentralized and everything has to be owned and tracked by the four MAGA (formerly FAANG) corporations?
A bullet proof HOWTO can fix all of this.