mikaela.suomalainen
/
pgp-alt-wot
mirror of https://gitea.blesmrt.net/mikaela/pgp-alt-wot.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Compare commits

base: mikaela.suomalainen:2b72f9d247975b990d8d1bde45ec7e46531775b9
Branches Tags
mikaela.suomalainen:master
...
compare: mikaela.suomalainen:87092964745d10d84b523c5da428c9854c45f75c
Branches Tags
mikaela.suomalainen:master

2 Commits
2b72f9d247 ... 8709296474

Author SHA1 Message Date
Aminda Suomalainen ⚧ 8709296474
README.md: add mirrors (blesmrt + PPFI) 2021-06-10 16:31:20 +03:00
Aminda Suomalainen ⚧ d1f1b55dc1
README.md: add other places to confirm keys 
* web.archive.org
* project homepages
* similar projects/webpages (artemislena.eu, jonaharagon.com)
 2021-06-10 16:25:30 +03:00
1 changed files with 15 additions and 0 deletions
Show Stats Expand all files Collapse all files

15
README.md
View File

@ -40,6 +40,21 @@ control what people do with the signatures from this repository).
* `me/me.asc` is just my key and place where I try to keep all signatures it
has received. Symlinks are legacy reasons and other me's are also me.
## Places to check for keys
* GitHub, Gitea and GitLab expose user public keys when you append a `.gpg`
after their profile page (`.keys` for SSH).
* [The Internet Archive's Waybackmachine](https://web.archive.org/) is always
a good place too especially when using together with official websites.
* Some people have similar projects or webpages for this purpose
* [Artemis' verify page](https://artemislena.eu/services/verify.html)
* [Jonah Aragon's Third Party Public Keys page](https://jonaharagon.com/verify/)
## Mirrors
* main: [git.blesmrt.net/Mikaela/pgp-alt-wot](https://gitea.blesmrt.net/mikaela/pgp-alt-wot/)
* [git.piraattipuolue.fi/Mikaela/pgp-alt-wot](https://git.piraattipuolue.fi/mikaela/pgp-alt-wot)
## See also
* [Qubes OS: On Digital Signatures and Key Verification](https://www.qubes-os.org/security/verifying-signatures/)