u/isrendaw

Edit: I think I should have titled this "alternative generic key container formats" or something. I didn't mean to have this be about web certs. Is there a better word for this?

Hello! I'm working on some software that needs certificates for signatures/verification... and probably certificate chains/subkeys, maybe revocation lists, a format that can be easily updated for new future key formats, ideally with standard tools/compatibility, etc...

x509 would be the obvious choice here, but I was wondering if there was anything else (or new formats) that would work instead. There's a lot of historical cruft with x509, it's complex so the libraries for working with it are complex, and some stuff like needing to tie a name to the cert is an extra burden not relevant to my use... and it's hard to know what features can be dropped without reducing security overall.

I dug around the list of alternatives I came up with are:

• GPG
• CVC
• SSH (I don't think this supports chains...)

I thought there'd be more. I was wondering if there were any others I missed before I start digging in deeper.

The last resort is to just wrap my own container around per-key formats, which wouldn't be hard, but I felt like there must be a better way...

Edit:

• From @harrison_314 - JWT

I just signed up for Gemini (Pro?) a few days ago. The first two days it was great.

Today:

• Asking it to make a tiny code change (add a library and make a call), 2.5h, doesn't compile. Asked it to fix it, 5h more (still spinning, not fixing it)
• On multiple different project, with different problems, it's getting into loops then being killed by the loop detector
• It just spent an hour making changes, lists all of the changes it made. But when I look, there are no changes at all, none in git history, none in the working dir, none cached, nothing. When I ask it where the changes are, it claims the previous commit by me from 12h ago is what it just did.

It's literally done nothing of use for me today. Am I doing something wrong? Bog default gemini cli, no customizations, no settings changes except enabling desktop notifications.