I have a public PGP key! I’ve started signing commits on GitHub projects with this key, so feel free to verify them if you download the repository. If you know what to do with the key, here it is – if you don’t, read on.
-----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1 mQINBFchn1kBEAC8yNdHD7hS5f8Yc0cfiaPXeL1yDLzjxPniLtOzWkP9Ar4qM73d /pNGEDyzPmnoCs/kba93zvue81Gqla4ybvJFZsxl2C5lVabpZZ41oaZDYoWx20K9 eZMzOwqryi98hrTdWBb5jaLk+vNCtK1vVqr+6ekzVLDd4d3BNB1uHJ6MjwLTm4T4 SfGEOAnexLF39ytcTJWT4wkfdljmxTsaU2gCKx2HTc7BzonFdQqYs2rdnPocKQ+e 0bZ+Lc/oAVRWWSgnNf2DO2uZZaNIwyGmPyB3bF6p+ZHwf6/TLvmjI6kLdgZ9xzRB dnwrg4lG2QadcWqORbY04O6iwnCuHjmNj/iY9iFmagylLYAmiE9IRdxtmd+M8c7Q 7JBGLSBrnbKXcVI1mW0DZoVzBUwdneINMW2ySUNEo7HAj4vV5av8GTRd1mfgz6Ec RT/bzqSGetQLijmeWUUDhUU0ilQEz8TrS3xAFW8u9z0Ggv0aYFWUQTI/JX/GtV1J NP6yrWwnJnP1D67dkgkx4AUwl5KOPvi9nU96sWryYB1svAw76zEL3t+MBPWFKZKk c3NWQYCFl7wj7sdakL6rgB3LuxMCw5sYS0kAKvhh1tYJfnst8tpd2fvi3zzGafyY fsf2/BLfH3cbBh6taHAoRH4gqb4VhZuKcEs5VwSPdQuNoVT9lKglthDikQARAQAB tCJUYXRlIEJvc2xlciA8dGF0ZWJvc2xlckBnbWFpbC5jb20+iQI4BBMBAgAiBQJX IZ9ZAhsDBgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRAG/j8dyVcdgFiCD/4q GkNLMs8EN5x740zKrAV/meapHruEwpwf3YW86/tFkcnkUgx1r96XXji1IbhOLVN2 mXkxCcnuHdZJTnR6k9OL4qKIjbTN5TcVZr58tgNluqdXlE5xw0msCIPf3PCBj0yv NPSFtMbbf9atwX+SA/hH+GzwrG9Cb5zXTb+iMjnfWxYu35nNeojQ9FGt8AR3tw72 l3N6394cC8/iYzxJ2L10OutS/rALGaMZ++whgxWAKfInXISQMk8VZaadruj5JOiO /+HDT7y5+WUPXzgXm6kEg+2jqODPPPSWfPyFnRIbvZOEO+pSdkfi2U/PirpMonIz 0OyVbx019xvLow+mAIDTFrHWOw8XbdcLL4ivS5ZoMHxPWJOQVjAGVCuRcAAmLzed WOaCncOzj8niKRKEnCyygxgS6+sAPjd/DtlmiipAdlum6VwViSNwnYWaCXY8ZDKD t2medsdmJjW3odvYzHbfn3Wlk4zdk/S6wrnFEhGcXTvQMLTsl70sspfuDk1Kn4cv u8hZJ4IoJR9KGLhT1Ah0NI+baGLpyOLIrXdBQKwEh09FeOUtNUwii70D/iTwChbb jLUucnDsBA8NXkUWQOOyMMtC33+kb7+scGSnkWvRXRbN+p1r1CSMMs0wWuhZqT2y 3Xa/bmUSjOhLGW/L+ORKpQF5j5/GVWol835/YJaWBrkCDQRXIZ9ZARAAxQLSeqEv uTTPUBb6CPKIpvdv/vKtI+mOx/jpE0ooS8FU9mskCHaQN49BWHV4quKNLRB2uWx6 pTSuNpc7XxyYuAOli3JEV034A2X4pu+XNy+VJoZF9QWw6YiyP/r8lMg1gzSCCR3V AfC0gcdTX0nuaj1VNo/MgJ8B5H5gzalY0++onlZttfUrh47vd5jzlaceqKM0nnwR P5yAfUPsaQDtC1ysqUscPtVn+H1GALnLU4FWF29tZ5HsQo7tBiC/LIJKGR6EjTlw yNls09CK0VW1ecYW5ZgrEnsoE5PXlYRaU4yswkp5hOF08K67M8Kk2TByQhdXdJU9 5sKOhV5NFhxP11ekXpd4UNeiEgajknCjlFA5vr0EGAZiKTaNz3meWcP7wXYKB0e1 DuhZJvvXawVaEm003WAPMVeJuG0IcEtntyvvaxYISnD/ZItheqzrIQi28C4vbwfN b0QpQOE0fRbVQzLXaGXDCyCSeRZF8gfA2EwmujV2GdPsPZEvYXX7ZC/B0urMElpx 5VJkt2bYT8YJF9djtxoQR9oOFrCFR/dMjLFzj0YANLl1l1e7tA5MfzmAHPTS6398 fMRCaMnu1mH7rFFzrVwBYjEzrJ5zbhcvbvWCD2OUXC/u27I9RRXz+SC2A6RLokXW CjnvlH9SEkz5CFTUdTDVapNUzWEff9kfbksAEQEAAYkCHwQYAQIACQUCVyGfWQIb DAAKCRAG/j8dyVcdgE0OEACqfMpCxYQyVpv2Qd6yvpbtP4ov0EBieyLctAwaFCix i1QU//SeXyOwI1VJ6rYxQR6eXBnEFRvfSKZy+fIp9KcvAjNnoNIZlnXfyFxQq36l TV7qi1B5PE8U0BnE/IUW771bPawJuTK4BLghkEPDFD0Uu1IVqJ4s3Lh9yoBdnfdR znk7XcMP4AhFe7/lE/taysQC1c2XyINuiSN/3yOuI+R6IG/UpDeBAXhaYTLG5DeQ 0TC+sIHsFP5aj4M9qDAu9b+SlYw9gGbLmChn52+U59pTaGJGJRytq4l41C95gSfF qhinAIe6u6zVgE0bNzKSfix/V4K00H1QKtXCA/nrnCjfoirDiBbITUzvl2S/1i3d T1FTxlwmWUSUKoJ/R4xHskrSQKIL9tqg6JP4bYc3z0yBj49pjzrBGpijF+8C1oil 8gDgiBxwNPstt/15jhlTwrhGL/XQCpvi0plfzq9eSADGxDhg7qOwxUBhjki/0Uw1 v0BPth0K/duJba2vNOVzjnsnF3ossIpDvyybjlrVCiVd+/1J/lk6Z2rIx9vhdM/s QWu0stP47+C0gkyac3HvqFhVJ999RRN67WvEtw2nhFbTymdHmNiZKOWgyLImwWbP NVgPQ0sBTAE6mE3b/kwbC0WHbNT1qdh1xo7C07Rv5X/hIk9kbiiOzrL31SBjuY05 bA== =HxNa -----END PGP PUBLIC KEY BLOCK-----
So what is PGP?
PGP, or Pretty Good Privacy, is a program designed to encrypt and decrypt data. While it was originally developed to encrypt email communications, it is also used to send files securely or confirm that something did come from the source it claims to be from. So, if you download something that I’ve encrypted or signed, you can use the public key above to verify that it really did come from me, and that it hasn’t been changed in transit.
I mostly use PGP to sign commits and software releases, but if you have a security hole you’d like to encrypt while reporting, feel free to use the key above.
Still confused? Computerphile has a great video explaining the more abstract philosophy behind public-key cryptography, which PGP uses.