OpenKeychain abandoned

elbarto

OpenKeychain is the only really good alternative for Android, however, it has not been receiving updates for over a year. I use it very frequently, but the fact that it no longer receives updates frustrates me. Could it have been abandoned or could it be updated suddenly, possibly when the post-quantum algorithms are more unstable, like gnupg's Kiber "ML-KEM"?

argante

elbarto Not entirely abandoned.

https://github.com/open-keychain/open-keychain

WARNING: This software is no longer actively developed. We will still apply security fixes where reported, and do basic maintenance work, but no new features or will be worked on. We will try to consider and merge contributions where possible.

ChemicalWonka1

elbarto

elbarto in my opinion the biggest problem with Openkeychain is not having batch support to do PGP operations in sequence

blusterpilgrim

I agree, OpenKeyChain having stopped being updated did make me a bit nervous so I instead I've just been using Termux, the terminal editor app for Android. pkg install gpg and then do my keys through Termux. A bit more involved, but at least I have peace of mind that it is up to date.

elbarto

blusterpilgrim Well, do you think it's more interesting through Termux? I'll try it that way. Actually, I didn't even think about it that way.

cdflasdkesalkjfkdfkjsdajfd

blusterpilgrim how use termux to use my pgp keys under thunderbird?

mmobder

elbarto Termux

really shady app in its current state, if you're on GOS, I would try Terminal instead

elbarto

argante at least that, but there hasn't been any change in the repository for a long time, will it still be bug-free?

I don't understand how a well-recognized application stops being active, I see several that start and simply die due to lack of use by users, but OpenKeychain is used by many people in the Google store and has half a million downloads, excluding the parts that are downloaded through fdroid and other sources.

DeletedUser299

mmobder really shady app in its current state

Its becoming irrelevant for email, as several email providers do their own PGP, and even Thunderbird has PGP now. So I can see the decline in use. Apart from being old and not really eye candy, enlighten me on why its shady...

Novastatic

Just asking, does anyone have an alternative to get PGP on Android to work outside of using Open Keychain? I can't look at my mailbox.org emails on Android anymore due to Open Keychain having so many issues. It can't import keys created on desktop and vice versa.

userofgos

Novastatic Keybase may be of interest: https://keybase.io/

cdflasdkesalkjfkdfkjsdajfd

Novastatic openkeychain is working finest for me with mailbox.org (now only mailbox) with a key generated at linux desktop some time ago.

cdflasdkesalkjfkdfkjsdajfd

userofgos doesn't seems opensource. It is?

harp

cdflasdkesalkjfkdfkjsdajfd doesn't seems opensource. It is?

They say it's opensource under BSD license:
https://keybase.io/download
https://github.com/keybase/client?tab=readme-ov-file#license

Novastatic

cdflasdkesalkjfkdfkjsdajfd

Funnily enough, I literally got it to work finally today, after failing twice or so in the past. For some reason when I would try to confirm a key, the option had nothing like this issue described, import via clipboard wouldn't work like in this issue, and for some reason any keys generated by OKC wouldn't import in desktop Thunderbird, they made errors in the app.

But I just downloaded my Thunderbird-generated public and private key to my phone, imported them, and it's usable now. Not exactly sure what I messed up previously but it was frustrating.

Viewpoint0232

For me, when I try to decrypt an email in Thunderbird+OpenKeyChain, it keeps asking me to enter the password, even though I say "remember forever" (or something like that). Anyone else has this problem? I'm not even sure if it's a problem with Thundebird or OpenKeyChain.

argante

There is also AutoCrypt.