-
The place to publish and search OpenPGP public keys.
You can normally get publishers' public keys on https://keys.openpgp.org/ or the older https://pgp.mit.edu/.
#Security & Privacy #Password Management #Password Managers 20 social mentions
-
Use GPG Suite to encrypt, decrypt, sign and verify files or messages.
For anyone publishing on Maven Central, I would suggest using an app from https://www.openpgp.org/software/ like the excellent https://gpgtools.org/ to manage keys and automatically sync your keys to the key servers you want. Using gpg directly is a huge pain in the butt. You can also put the public key for verifying your signatures on your website (or services like keybase.io, here's mine: https://keybase.io/renatoathaydes) to make it easy for consumers to know verify your artifacts.
#Security & Privacy #Social & Communications #Encryption 32 social mentions