> Don't use GPG for email except when attaching secrets.
Don’t even do that. Find a different way to send those secrets.
Don’t even do that. Find a different way to send those secrets.
Everyone this applies to already has GPG installed.
It's fine. If you have some specific argument against it, speak up.
The first is a problem that is often not thought about in the moment. You know you need to transmit a secret, but it is rare that people think about under what future circumstances they will want to deny having sent it.
The second is a practical defeat of the assumed security model. The GPG secret is a high-value target that is relatively easy to snag from unencrypted memory on untrustworthy devices.
Signing is optional.
But there's not a go-to answer because the lesson learned from PGP is that there can't be a single crypto Swiss army knife of a protocol. There are conflicting tradeoffs that necessitate the use of different protocols for different use cases. The best replacement for PGP is probably a basket of different protocols. See for example: https://blog.gtank.cc/modern-alternatives-to-pgp/