Flatsonar

rPGP

by Jonathan Zeppettini

Manage OpenPGP certificates and keys

Sandboxed Unverified publisher MIT v0.1.3
Screenshot 1 of rPGP Screenshot 2 of rPGP Screenshot 3 of rPGP Screenshot 4 of rPGP Screenshot 5 of rPGP

About

rPGP is an OpenPGP certificate manager in the spirit of KDE's Kleopatra: a window that lists your certificates and lets you generate, import, export, certify, sign, encrypt, decrypt and verify without touching a command line. It keeps two questions apart that are easy to confuse and dangerous to mix up: whether a certificate is internally valid, and whether the name on it belongs to the person you think. The first is arithmetic; the second is the web of trust, computed from the certifications in your own store. Features: - Generate keys to RFC 9580 or RFC 4880, with a passphrase and a pre-made revocation certificate - Sign, encrypt, decrypt and verify files, or text in a built-in notepad - Encrypt to certificates, to a password, or to both at once - Certify identities, mark trusted introducers, and see what authenticates a key - Revoke keys, user IDs and subkeys, with the consequences spelled out - Look up and publish keys over WKD and HKPS - Use keys held on a smartcard through gpg-agent, so the secret never leaves the card Written in Rust throughout, using Sequoia for OpenPGP and Slint for the interface. No webview, no Qt, and it never shells out to gpg.

Permissions

Everything this app can reach outside its sandbox. Nothing here weakens it.

  • Wayland display
    --socket=wayland
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • inter-process communication (needed for X11)
    --share=ipc
  • GPU acceleration
    --device=dri
  • network
    --share=network
  • access to xdg-run/gnupg
    --filesystem=xdg-run/gnupg

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • app.rpgp.rpgp claims the domain rpgp.app; only its owner can prove that
    publisher:namespace
  • repository is 40 day(s) old with 0 star(s): no track record yet
    publisher:new-repo

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.