From d1f1b55dc1b87b1fc202ef285674c0088ee4acff Mon Sep 17 00:00:00 2001 From: Mikaela Suomalainen Date: Thu, 10 Jun 2021 16:25:30 +0300 Subject: [PATCH] README.md: add other places to confirm keys * web.archive.org * project homepages * similar projects/webpages (artemislena.eu, jonaharagon.com) --- README.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/README.md b/README.md index 38ffd08..4fd2eb4 100644 --- a/README.md +++ b/README.md @@ -40,6 +40,16 @@ control what people do with the signatures from this repository). * `me/me.asc` is just my key and place where I try to keep all signatures it has received. Symlinks are legacy reasons and other me's are also me. +## Places to check for keys + +* GitHub, Gitea and GitLab expose user public keys when you append a `.gpg` + after their profile page (`.keys` for SSH). +* [The Internet Archive's Waybackmachine](https://web.archive.org/) is always + a good place too especially when using together with official websites. +* Some people have similar projects or webpages for this purpose + * [Artemis' verify page](https://artemislena.eu/services/verify.html) + * [Jonah Aragon's Third Party Public Keys page](https://jonaharagon.com/verify/) + ## See also * [Qubes OS: On Digital Signatures and Key Verification](https://www.qubes-os.org/security/verifying-signatures/)