Read the thread above, a PGP signed message is required as anyone can just paste your public PGP key but only one person can sign with it.