tailscale also is written in go, making the integration on mobile especially, often times a lot harder and more expensive
111 karma · joined September 14, 2012
[maintainer of iroh here]
This is the same algorithm used by git.
There are higher level implementations that use the dates on signatures to straight out reject sha1 material, but that gives only a limited protection.
@wiktor-k is working on a tool to use rpgp to provide a simple solution to work with smartcards