Top all-time · #5012
Simon Josefsson
Personal blog · blog.josefsson.orgsecuritysystems
Simon Josefsson's personal blog at blog.josefsson.org covers security and systems. Since 2012, 15 different Hacker News readers have linked it 26 times, most often “Debian Taco – Towards a GitSecDevOps Debian”. It is still writing: the last post was on 2026-09-04, and you can follow it by feed.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN readers link this blog for posts on GnuPG and offline master keys, including setup for YubiKeys. The other comment in the set discusses OpenSSH post-quantum cryptography without linking the blog.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Debian Taco – Towards a GitSecDevOps Debian2 people · 2 mentions · first linked 2026-01-10
- Why I don’t Use 2048 or 4096 RSA Key Sizes2 people · 2 mentions · first linked 2016-11-04
- Offline GnuPG Master Key and Subkeys on YubiKey NEO Smartcard2 people · 2 mentions · first linked 2015-09-16
- Coping with Non-Free Debian2 people · 2 mentions · first linked 2023-07-11
What Hacker News says?
> NTRU Prime (sntrup) is there mostly as a quirk of history (mlkem wasn't available when SSH went down the road of doing PQ). ML-KEM (originally "CRYSTALS-Kyber") was available , it's just the Tiny/OpenSSH folks decided not to choose that particular algorithm (for reasons beyond my pay grade). NIST announced their competition in 2016 with the submission deadline being in 2017: * https://en.wikipedia.org/wiki/NIST_Po…
Comment linking /2023/05/12/streamlined-ntru-prime-sntrup761-goes-to-ietf/
on “OpenSSH Post-Quantum Cryptography”Submitted Towards Idempotent Rebuilds? as a story · 59 points
HN discussionfor folks interested in more on yubikeys and gpg I also would suggest these two blog posts http://viccuad.me/blog/secure-yourself-part-1-airgapped-comp... http://blog.josefsson.org/2014/06/23/offline-gnupg-master-ke...
Comment linking /2014/06/23/offline-gnupg-master-key-and-subkeys-on-yubikey-neo-smartcard/
on “Yubico with new 4096-bit keys and gpg-agent for ssh authentication”Submitted Binary Distribution Rebuilds as a story · 30 points
HN discussionSubmitted Apt archive mirrors in Git-LFS as a story · 14 points
HN discussionSubmitted Why I don’t Use 2048 or 4096 RSA Key Sizes as a story · 4 points
HN discussionSubmitted Reproducible and minimal source-only tarballs as a story · 3 points
HN discussionSubmitted Why I don’t Use 2048 or 4096 RSA Key Sizes as a story · 3 points
HN discussionSubmitted Offline GnuPG Master Key and Subkeys on YubiKey NEO Smartcard as a story · 2 points
HN discussionSubmitted Debian Taco – Towards a GitSecDevOps Debian as a story · 1 points
HN discussionSubmitted Debian Taco – Towards a GitSecDevOps Debian as a story · 1 points
HN discussionSubmitted Building Debian in a Gitlab Pipeline as a story · 1 points
HN discussionSubmitted Reproducible Software Releases as a story · 1 points
HN discussionSubmitted OpenSSH and Git on a Post-Quantum Sphincs+ as a story · 1 points
HN discussionSubmitted Validating Debian/Copyright: Licenserecon as a story · 1 points
HN discussionSubmitted Coping with non-free Debian as a story · 1 points
HN discussionSubmitted Coping with Non-Free Debian as a story · 1 points
HN discussionSubmitted How to Trust a Machine as a story · 1 points
HN discussionSubmitted A Security Device Threat Model: The Substitution Attack as a story · 1 points
HN discussionSubmitted Sigstore protects Apt archives: apt-verify and apt-sigstore as a story · 1 points
HN discussionSubmitted OpenPGP master key on Nitrokey Start as a story · 1 points
HN discussionSubmitted OpenPGP Key on FST-01SZ as a story · 1 points
HN discussionSubmitted Towards pluggable GSS-API modules as a story · 1 points
HN discussionSubmitted SSH Host Certificates with YubiKey NEO as a story · 1 points
HN discussionSubmitted Scrypt in IETF as a story · 1 points
HN discussionSubmitted Portable Symmetric Key Container (PSKC) Library as a story · 1 points
HN discussion
