please don't conflate the #OpenPGP specification with GPG and don't compare crypto specs to implementations unless you are ready to say "interoperable multi-party agreed specs are bad". Fwiw we use an audited lean, pure Rust implementation to provide users "guaranteed end-to-end encryption" that is safe against compromised servers and requires no key servers at all. Here is a post about a 2024 analysis from the applied crypto team of ETH Zürich about #securejoin delta.chat/en/2024-03-25-crypt…