PGP Signing Your Comments

This procedure connects your PGP public key, youe website and your comment, which is different from the Web-of-Trust model, using the OpenPGPComment Plugin.

If you have a PGP public key (if you don’t, create one for yourself), put a link to it in the head section of your web page with the following code (should be in one line):

<link rel="pgpkey" type="application/pgp-keys" 
 href="http://yoursite.com/path/to/yourkey.asc" title="Your Name's PGP Public Key" />
  1. Compose and preview the comment until you are satisfied.
  2. Make sure you enter a URL where you have put that code shown above.
  3. Use GPGShell for Windows, GPGDropThing for MacOS X or other PGP tool to clear-sign the text in the comment entry box. Make sure that word wrap is off in your PGP tool. Replace the original comment text with the clear-signed version in the comment entry box (GPGShell can do this automatically for you).
  4. Click PREVIEW once again and then click on POST.

You comment text will look no different than an unsigned one, but there will be a clickable link for “PGP Sig” in the “Posted by” line after the comment. If anyone clicks on that link to verify your comment, your key is fetched from the URL specified in the link on your website.