gobby.debian.org → debconf14 → bof → GnuPG

GnuPG in Debian
---------------
 • /etc/alternatives for gpg
 • defaults: gpg or gpg2
 • How to improve shared maintenance via pkg-gnupg.
 • cross-building and gpg's place in bootstrapping debian (building gpg4win)
 • Vcs religious wars -> move to git
 • elliptic curve support? (are we using "safe" curves [djb] by default)
 • d-i (udebs)
 • 2.1 (the eternal beta)
 • 2.1 new private key format incompatible with 2.0
 • 2.1 agent and pinentry is mandatory
 • divergence from upstream defaults?
 • gpg2, gnupg-agent, gnome-keyring, dependencies, and auto-launching
 • dependency cleanup: many packages pulled in by default due to pinentry-gtk2 (183MBy with Recommends, 107MBy without.  Potentially split?   (with pinentry-curses, 30.8Mby/18.7Mby)
   - jessie d-i beta 1 test install of 'standard' task (no desktop) brought in pinentry+gtk2+libgl* too
   - suggestion: change our dependency, have graphical desktops pull in pinentry-gtk2 or nothing, if they already have native support
   - As mentioned in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=753163#20, GNOME already has builtin support for unlocking gpg keys via gnome-keyring/seahorse which is neatly integrated into gnome-shell