This repository contains a copy of the OpenPGP public keys that I use to sign things.
Important
Before using the keys included in this repo, check their validity. Here are some ways that you can do that:
- Check the git history I won't remove keys from this repository, instead I will add a note to the table below. If a key is modified in the git history without a comment, don't trust it.
- Check the signature of the commit that it was added in
All commits to this repository will be signed by
[email protected](or[email protected]prior to T1750716900) - Check the mirrors This repository is mirrored between my github and gitlab. Check that they both say the same thing (and everything is signed with the same key)
- Check the key file signatures
Included in this repository are the public key files with a signature file alongside them. Each public key file has been signed by
[email protected]. Check that the signatures are valid.
Important
If the key files are updated, a note will be included here and a changelog will be updated (or created) - this changelog will be signed with the root key.
| Key | Valid | Notes |
|---|---|---|
| [email protected] | Yes | T1750716900: Replaced old root signature with new signature |
| [email protected] | Yes | T1750716900: Replaced old root signature with new signature and added new dev signature |
| [email protected] | Yes | T1750716900: Replaced old root signature with new signature and added new dev signature |
| [email protected] | Yes | T1750716900: Replaced old root signature with new signature |
| [email protected] | Yes | - |
| [email protected] | Yes | T1750716900: Replaced old root signature with new signature and added new dev signature |
| [email protected] | Yes | T1750716900: Replaced with new root key |
| [email protected] | Yes | - |
Note
All of my keys are signed by my root key.