It's been repeatedly argued that end-to-end email (encryption), particularly using OpenPGP/GPG/PGP is not suitable ... understood. But I'm still unsure about what people's feeling is for cryptographically *signed* emails. If not using GnuPG, what then? I know there's S/MIME, but that's rather 'top heavy'. For encryption, `age` is a suitable replacement (in the non-email context). For signing, there's Minisign in a similar context. But ... I'm still thinking that there's *especially* value for signing (fully authenticating) email. Any positions on how to approach that these days? Or *why not* to do it? #cryptography #signatures #signing #email