Signatures · Entry 12
Using PGP-signed announcements to confirm a Tor Watch link
A signature links a message to a key, which is stronger than any amount of agreement in a forum.
What you need
The signed message, the public key it claims to come from and a tool that can verify signatures.
Key provenance
A valid signature from an unknown key proves little. Use the key you obtained earlier from a trusted, dated source.
Check the date in the message
Old signed messages can be reposted. The date inside the signed text tells you when the Tor Watch link was announced.
Record the result
Note in your log that the torwatch link was confirmed by signature and which key fingerprint was used.