If you detach sign files as a software developer, maintainer etc. , you may appreciate the release of yubisigner, which does not allow to fake Comment: headers like in GnuPG, or untrusted-comment: in signify-openbsd. yubisigner is GUI based and available at: https://github.com/Ch1ffr3punk/yubisigner. Comments and critics welcome.
https://github.com/Ch1ffr3punk/yubisigner
Mar 11 · 8 weeks ago