OpenBSD (was Should distributors disable IPv4-mapped IPv6?)

I wholeheartedly agree with their stance on the CA protection racket; not as impressed when they won't follow up and put their money where their mouth is with a TLSA record.

But signify is long overdue. It neatly sidesteps the worst thing about GnuPG, distributing and finding keys (an elephant so big it needs an entire dedicated infrastructure), by having pubkeys short enough to fit into one SMS/tweet. GPG's don't even fit on one screen at times.