@mgorny@social.treehouse.systems Once GnuPG can, at least, verify RFC 9580/9880 compliant signatures (https://floss.social/@hko/117127125465768501), we can think about creating new PQC-resilient keypairs and use a tool (e.g. sequoia-pgp) that can create RFC 9580/9880 compliant signatures for ::gentoo repo, stage3 tarballs and whatever. Since https://dev.gnupg.org/T4618.html, I lost trust in GnuPG.