@lispi314 @enigmatico @bunnybeam @kimapr
nodds in agreement

• I think having a proper #API is a way to facilitate that, cuz worst-case one just slaps together some #aliases in #bash, #fish, #zsh or whatever #shell and just uses #curl to query stuff manually as this solves the whole #WebApp - issue.

And I do prefer #FLOSS as it works fine for an ever increasing audience!

• Even if we choose to point at bad #UX / #UI combos like #GnuPG, we've to also acknowledge better existing alternatives like #enc that just work!

Personally, I think that everything people are expected to use if not forced to use should be #OpenSource as licensed in a #OSI accredited license and be released with #SourceCode and #documentation to make #reproduceableBuilds and thus facilitate #audits by truly independent parties...

• And if that's not possible any requirement to using said things should be outlawed no matter the context!

A unsarcastically good example is #S3, even tho I hate #amazon, they wanted #developers to integrate their #ObjectStorage which necessitated an #open source'd API to the point that it's #backend is inherently reproduceable, and now every halfassing #Webhoster offers S3 #storage, sometimes with bit & second-precise billing.

@annaaurora how came?

Doesn't @thunderbird let you import the Keyfile??

@scottjenson #UX is important.

UX is why #Apple runs circles around #Windows and #Linux in termsbof #accessibility and why I know people who'd genuinely be able.and willing to pay $500 per year for #macOS to be supported on non-Apple hardware!

• The peak antithesis to every rule re: #UX & #UI design is #GnuPG, and I've yet to see anyone defend that shitty UX!

Compared to that, #vi / #vim / #neovim is good!

@Natanox @djvdq I do agree in that regard as in that a lot of #FLOSS doesn't do good #UI & #UX but I've yet to see an issue that wasn't already covered well-enough (even for #GnuPG / #GPG there's #Kleopatra as a nice #GUI!) to the point that even on #Windows or #macOS you'd have to use a #CLI tool for that...

• Cuz 99,999% of what "#TechIlliterates" and "#Normies" want is to get their basic stuff done and working.

In fact, they don't give a s**t about tje underlying OS. Most don't even care if they use #Firefox or #Chrome and #Google or #DuckDuckGo.

• All they want is get shit done! And these.folks are eadily helped with a hands-on on a good #Linux dostro and maybe preinstalling some #RemoteSupport tool like #Dayon where one can help them if there ever was a need to do anything...

@ahelwer I've been using smartcards for about a decade now. Works well enough for keeping three 4096-bit RSA subkeys around on a more-secure-than-not environment. But rather than have the card generate the private keys, I generated the private keys on an airgapped machine, and keep encrypted copies elsewhere (USB drives) for when I needed to change smart cards, which has happened once so far.

@lapcatsoftware +9001%

This is why #Passkeys are garbage and why I'd rather do #PGP-based #2FA with #GnuPG on #Termux on.my #Android than anything...

@arrjay which is why I intent to package it for my #GNUfree #toybox + #musl / #linux distro called OS/1337...

• Because #GnuPG sadly is the prime example of what @landley once said: '[...] #OpenSource can't do [good] #UI'[...]

• There is nice looking #FLOSS but #GPG is really one of those things that gets beginners to choose violence in their dreams...

It also allows you to add some cool functions in your .bash_aliases if you so choose.

• Like encrypt $FILEMANE $KEYFILE that then spits out $FILENAME.encrypted.asc as a #PGP-encrypted file...

Either way, #enc is a pretty awesome tool and I think it's one of those essentials anyone looking for a #TUI / #CLI-first distro would want.

So feel free to checkout #OS1337 & @OS1337 ...

@ivarch @landley
Not to mention a #GNUfree Linux distro is kinda useful given that the #FSF has kinda given up on being a net-positive and instead turned itself into "The church of #GNU" overflowing with Stallmanists whilst their stuff gets #bloated af and better alternatives show up.

• A good example is #enc which is way less cumbersome than #GnuPG / #OpenPGP and just works!

@sophieschmieg : the elephant in the room is *who exactly does a given public key belong to*.

(More precise: who owns the private key that must not have been leaked).

Because most people do not understand that not knowing this is gaping security hole (a way bigger problem than possibly weak crypto), PGP was mostly useless from the start.

@SpaceLifeForm @noflcl
@tryst
@freddy