This repository contains various GPG keys and related signatures. It is organized to help manage and verify GPG keys efficiently.
-
KeySignatures/: This directory contains signatures of my public keys by others.
examples:
my_KeyID_signed_by_alice.asc
: My public key signed by Alice.my_KeyID_signed_by_bob.asc
: My public key signed by Bob.
-
MyPubkeys/: This directory contains my public GPG keys.
[email protected]
: My public key.
-
SignedPubkeys/: This directory contains public keys of other people that I have signed.
examples:
alice_KeyID_signed_by_me.asc
: Alice's public key signed by me.bob_KeyID_signed_by_me.asc
: Bob's public key signed by me.
KeyID: Short Pubkey ID.
To import my public keys into your GPG keyring, you can use the following command:
gpg --import MyPubkeys/[email protected]
To verify a key signed by me, you can use the following command:
gpg --import SignedPubkeys/alice_pubkey_signed_by_me.asc
gpg --check-sigs [email protected]
Replace [email protected]
with the appropriate email address associated with the key you are verifying.
If you'd like to sign my public key and send the signature back to me, follow these steps:
-
Import my public key:
gpg --import MyPubkeys/[email protected]
-
Sign my public key:
gpg --sign-key [email protected]
-
Export the signed key:
gpg --armor --export [email protected] > my_pubkey_signed_by_<your_username>.asc
-
Send the signed key back to me via a Pull Request (PR):
- Fork this repository.
- Add your signed key file to the
KeySignatures/
directory. - Name the file
my_pubkey_signed_by_<your_username>.asc
. - Create a PR with a description of your changes.
- Delete your fork (optional).
Feel free to open issues or pull requests if you find any discrepancies or have suggestions for improvement. If you have signed my public key, please submit a PR as described above.