PGP Signature

I have started to distribute software with GnuPG-produced digital signatures to help prove the authenticity of the software. If you want to verify the digital signature of a file such as jed-0.99.18.tar.gz, then also download the associated detached signature file, which in this example would be jed-0.99.18.tar.gz.sig and execute the following command: You should see something like: You should not be alarmed if you see the warning message. This just indicates that you have not taken steps to ensure the authenticity of of my signature. Note that the key's fingerprint must match the my public key's fingerprint, which is given below. If you see a message such as: then you will first need to obtain my public key and add it to your keyring. My public key may be obtained by downloading the ascii file jedavis_public_key.asc. To add it to your keyring, use and then verify that its fingerprint is by running