neuhalje/bouncy-gpg

Recommendation: Implement SOP interface to benefit from test.sequoia-pgp.org

vanitasvitae opened this issue · 1 comments

The folks over at sequoia-pgp.org are doing a great job of improving the OpenPGP ecosystem. What helped me a lot to gain a deeper understanding of OpenPGP signatures and verification was to implement the Stateless OpenPGP Command Line Interface which allows to plug an implementation into the sequoia interoperability test suite which uncovered a ton of things I missed.

The SOP specification describes a minimal command-line application which can be used to test different implementations against each other and against certain test cases.
The suite goes into great detail and contains lots of checks that otherwise easily slip the radar.

I can highly recommend implementing the interface to improve bouncy-gpg.

FYI: There is now sop-java which you might consider creating an implementation for.
That way you can benfit from sop-java-picocli providing you a CLI front-end for free 😉