Understanding OpenPGP 37
michaellucastheauthor@hotmail.com and use this OpenPGP
key!” (Of course, that isn’t my website, my email address, or
my OpenPGP key. Anyone trusting that will find themselves
talking to someone else—and blaming me for the results.)
At times, you’ll see email signatures with the line “My
public key is available at http://www.mywebsite.com/,” which
seems like it would be better. It’s certainly so popular that
you’d think it would work. If someone tampered with the
email, however, they could also put in a new URL for the pub-
lic key website and fool the recipient. This works best when the
author sends a lot of email, so correspondents can verify the
URL with that displayed in other messages. This would work
well only with ...