@straw @srestegosaurio GPG is just a PGP implementation.
PGP should be avoided at all costs. It is insecure, bloated, was designed way before modern security was a thing and widespread, and is excessively complicated.
Even Debian is moving away from PGP (which is saying something).
Signify should be used as PGP signing replacement. age should be used as PGP encryption replacement.
More info on why PGP is terrible:
https://latacora.micro.blog/2019/07/16/the-pgp-problem.html