I use my PGP key to sign commits and tags on a limited number of personal projects. While I will respond to emails sent using PGP, I’d strongly recommend against doing so:

  • Various issues best explained by experts. Like this episode of Security Cryptography Whatever, or this blog by Soatok.
  • I’m not a regular user of PGP+email and will probably screw up somewhere.
  • I’ve been down this road before and it only leads to pain and suffering. Let alone getting things to work nicely on mobile.
    • I’ll only check from my PCs for this reason.

If you need secure communications, ask for my Signal username. Otherwise, we can try to work something out but no guarantees.

My current PGP key is EF84 4651 D55B C81E 66E4 C911 3D27 DAED B2E8 5FA6, corresponding to [dev at jessicarod, dot ca] . Retrieve it from the keyservers using the sq CLI:

# Pull from the keyservers
sq network search <fingerprint_or_email>
# Trust the cert once you verify it
sq pki link add --cert <fingerprint> --all