diff --git a/README.md b/README.md
index 38ffd08..4fd2eb4 100644
--- a/README.md
+++ b/README.md
@@ -40,6 +40,16 @@ control what people do with the signatures from this repository).
 * `me/me.asc` is just my key and place where I try to keep all signatures it
   has received. Symlinks are legacy reasons and other me's are also me.
 
+## Places to check for keys
+
+* GitHub, Gitea and GitLab expose user public keys when you append a `.gpg`
+  after their profile page (`.keys` for SSH).
+* [The Internet Archive's Waybackmachine](https://web.archive.org/) is always
+  a good place too especially when using together with official websites.
+* Some people have similar projects or webpages for this purpose
+  * [Artemis' verify page](https://artemislena.eu/services/verify.html)
+  * [Jonah Aragon's Third Party Public Keys page](https://jonaharagon.com/verify/)
+
 ## See also
 
 * [Qubes OS: On Digital Signatures and Key Verification](https://www.qubes-os.org/security/verifying-signatures/)