Not actually PGP, but as the function is the same, why not Warning: minisign doesn't have and won't have WoT or inbuild certifications or revokations on the key belonging to whom it's said to belong