[14:31:08] Krinkle: It's a misfeature in Safari. More details on the task. [16:24:03] Reedy: does https://gerrit.wikimedia.org/r/#/c/327678/ need to be deployed? [16:29:02] No [16:29:11] Brad wrote a better patch [20:42:07] anomie: do you think that watchlist one warrants a backport? [20:44:56] legoktm: Depends on how many people are using that unreadcount prop, I don't think it affects anything else. [22:40:00] bd808: Iv'e got PGP all set up now btw (with regards to verified tags on github and stuff) [22:40:08] At least, I think I do. Took a while to figure it all out. [22:43:11] Krinkle: nice [22:46:20] Krinkle: haven't you heard, PGP is dead. It's all OTR and Signal now. [22:48:11] greg-g: git signed tags :) [22:49:21] bd808: I know I know. I just saw Bruce Schneier's blog post amplifying the other dude's blog post about how PGP is dead. Bruce ended with "I support encrypted communications, contact me via OTR or Signal" or some such [22:49:58] gpg is the irc of the encryption world [22:50:15] lots of power, shitty ux [22:51:00] I've never really used gpg for anything but code signing [22:51:16] and shared password stores I guess [22:51:30] it's basically a shitty social network for me [22:51:47] and a way for me to encrypt backups and passwords used in config files [22:52:42] t-shirt slogan: "PGP is my social network" [23:12:49] signal vs pgp is a thing that makes me sad. [23:12:59] saw this yesterday: https://www.mailpile.is/blog/2016-12-13_Too_Cool_for_PGP.html [23:13:11] legoktm: make a sticker! 10 custom 3x3 die cuts for $9 -- https://www.stickermule.com/en/custom-samples [23:13:18] pretty spot on. [23:14:41] spot on (in this instance) == my exact thoughts after joining the moderncrypto mailing list. [23:18:51] thcipriani: I presume you saw Bruce's post, yes? [23:19:01] also, thanks for that link, I like [23:19:29] no, I haven't seen it [23:30:51] https://www.schneier.com/blog/archives/2016/12/giving_up_on_pg.html [23:31:39] I saw giving up on pg and assumed pgsql [23:32:31] :) [23:35:54] I only have a pgp key for signing the releases of MW. But considering we basically only do it for validation (and not verification) md5 or one of the shas would probably work fine [23:38:15] if I trust linux, I trust you (for some value of trust) http://pgp.cs.uu.nl/mk_path.cgi?FROM=38DBBDC86092693E&TO=72BC+1C5D+2310+7F8A&PATHS=trust+paths [23:40:27] Eh.. I mean GPG of course, not PGP [23:40:29] :/ [23:40:40] Or.. [23:41:11] GnuPG=GPG, but PG=PGP [23:41:15] Okay, this is too confusing. [23:41:26] PGP is the standard, GPG is an implementation [23:41:27] I'll start calling it GPGP [23:41:47] "pretty good privacy" vs "gnu privacy guard" [23:41:53] Yes, yes, and later today I'll deploy some wikimania patches to our wikimedia cluster. [23:42:34] GPGP - Generally, pretty good privacy? [23:43:47] Krinkle: oh? [23:44:02] greg-g: just kidding :) Not on Friday [23:44:11] Krinkle: :) :)