Modern Alternatives to PGP
Some problems PGP (these days, this means GnuPG) solves pretty well for me:<p>- offline encryption;<p>- distributed web of trust;<p>- digital signature (for messages and software packages);<p>- batch processing;<p>- certification of other users without a server at all;<p>- ability to use a completely &quot;offline&quot; infrastructure;<p>- sending messages without revealing the actual recipient (i.e. --hidden-recipient)<p>- multiplatform;<p>- easy to integrate in another applications and scripts;<p>- allowing independent encryption, signature and certification keys but using them together (i.e. I receive an encrypted message that was signed with a key certified by another key. The system must correctly detect and use the certification-only key already in my keystore);<p>- allows copying and pasting the data (messages, keys, etc.) in an email;<p>- open source and well tested implementations;<p>- not forcing me to use it in a mobile phone;<p>- for god sake, not being an Electron app!<p>- ideally, all this in a single package.<p>People keep distilling an irrational hate on OpenPGP but their proposals can&#x27;t handle all these use cases. Of course, they handle some small subset very well, but none covers all of them (e.g. Signal does pretty good when I need to exchange short mobile messages, but it is of no help when I need to push a few 30 MB files from my mobile phone to GDrive without giving Google all their contents).