If I do a google search for "mD2pcb418UcMP8YAn16BdsIFd6" I will get a list of results that display the string
mD2pcb418UcMP8YAn16BdsIFd6/e1kxCx5jlyyJBEnqAiEoEEBECAAoFAlNDyN4DBQF4AAoJ
in the results preview list, which is the same that HI-TEC99 quoted in his post.
But if I click the link, for example
https://sks-keyservers.net/pks/lookup?op=get&search=0x2BD5824B7F9470E6, I get a page with different version, where the line in question is
mD2pcb418UcMP8YAn16BdsIFd6/e1kxCx5jlyyJBEnqAiEYEEBECAAYFAljiW5UACgkQymYr
The key has changed at some point as google is still caching the old version in its results preview. I don't understand how this all really works, so I get worried. What's up?
ThomasV, thanks for chiming in, could you for clarity's sake post your correct key here to clear up the confusion?
You are right, the key has changed at some point. The string I quoted is still showing up on google, and google's cached pages of some key servers containing ThomasV's key still show that string, although it's not in the live versions.
http://archive.is/k2UhcThis live page from pgp.circl.lu doesn't show the string, but google's cached version of that page shows the string.
http://pgp.circl.lu/pks/lookup?op=get&search=0x2BD5824B7F9470E6http://webcache.googleusercontent.com/search?q=cache:usimuzvXmTkJ:pgp.circl.lu/pks/lookup?op%3Dget%26search%3D0x2BD5824B7F9470E6I archived it here.
http://archive.is/eGdSvOne of my posts on the previous page made on March 26 at 09:49:48 PM contains that string, but my post on this page made on April 04 at 02:32:19 PM doesn't contain the string. However my first post used the key link from the electrum website download page, and my second post used the key link from the electrum website "about" page. Those two pages link to two different key servers. One of them links to pgp.mit.edu, and the other links to pool.sks-keyservers.net.
I can't find a google cached page of the pgp.mit.edu server key, but the google search results show the pool.sks-keyservers.net server's key changed. I don't know the reason for the change, I just copied and pasted what the keyserver page showed. These are the two posts, the first containing the string, and the second not containing it.
There is some kleopatra configuration you will need to complete before checking a signature.
*snip*
For step 1 you need to find ThomasV's public key and import it into your keyring. The electrum download page says both sources and executables are signed by ThomasV at present.
https://electrum.org/#downloadSources and executables are signed by ThomasV
It provides this link to a page where you can find his key.
https://pgp.mit.edu/pks/lookup?op=vindex&search=0x2BD5824B7F9470E6Click a link marked 7F9470E6 [selfsig] on that page.
https://pgp.mit.edu/pks/lookup?op=get&search=0x2BD5824B7F9470E6Another page should open containing the text quoted below (ThomasV's key). Copy and paste this text into notepad, then save the file as key.asc
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: SKS 1.1.5
Comment: Hostname: pgp.mit.edu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*snip*
I am from from the mines and using my desktop.
do you think I can repeat the verification? no.
so to make an asc file, I just copy thomases gnupg signature into a notepad and change the name to asc?
Yes, but only copy the part starting with the text shown in blue below, and ending in red text.
-----BEGIN PGP PUBLIC KEY BLOCK----------END PGP PUBLIC KEY BLOCK-----The bit in blue lets Gpg4win know it's reading an .asc file, and the bit in red lets Gpg4win know its reached the end of an .asc file.
This page from the official website gives a link to thomas's gpg.
https://electrum.org/#aboutThis link shows his gpg and the quoted bit is what you copy into notepad and save as an .asc file.
http://pool.sks-keyservers.net:11371/pks/lookup?op=get&search=0x2BD5824B7F9470E6-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: SKS 1.1.6
Comment: Hostname: keyserver.brian.minton.name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*snip*