Quote from: ronswanson77 on May 06, 2013, 01:04 pmWhen I try to verify the message GPA is saying the key is NOT valid. I've copied the entire message into my clipboard removed any extra spaces that may have gotten copied accidentally. I'm sure it's something wrong on my end but it's still weird.If you're using GPA, then you need to sign DPR's public key (Locally only!! Otherwise you'll upload your signature to a key server! This is the offline equivalent of updating every phone book directory in the world with legally binding evidence you know DPR's phone number. In addition this would reveal your IP address unless your copy of GPG is setup to route its communications via Tor).So, if you go to the keychain where the big list of public keys is on the GPA, you find the public key you want to sign, and then you right click and select Sign Locally. Then verify the signed PGP text again. It shall come up as "Valid".Edit: fatoldsun's method shall work just as well as the above. Indeed using the command line or terminal is often preferable because it always works the same way over time and there's usually no difference between different operating systems.Edit 2: Some people are saying that the "sign locally" option isn't there in the GPA. It does exist, it just may be hidden away someplace, you'll have to hunt it down in the options somewhere. Alternatively use a less awkward piece of GPG software or use oldfatsun's method.Different PGP implementations handle these things differently. To be honest I think this web of trust concept has been implemented poorly, it's a complete cock up from an anonymity standpoint. The designers of PGP should have been thinking about how to make the difference between "authentication use" and "anonymous use" of PGP very clear to the user, because it is not obvious in the least.Quote from: C20H25N3O on May 06, 2013, 09:50 amThank you very much pine!All of your posts are pricelessQuote from: TurpenT on May 06, 2013, 06:51 pmPine is a god/dess to this forum. We are lucky to have your insight!PS, Will you marry me?Thanks, it's DPR and co we should all thank the most, they are working their socks off all the time doing things they won't get the credit for, but which they'll get the blame for if they don't do them. Just so you know, Pine is not clickflashwhirr and has never claimed to be in the same way Shroommeister is not a mushroom (probably).Quote from: Wadozo on May 06, 2013, 08:36 amPerhaps another option for you is Gpg4usb. Works on all three platforms including Mac and Linux. Download it from here - http://gpg4usb.cpunk.de/download.html. Here's a link to astor's tutorial for Gpg4usb - http://32yehzkk7jflf6r2.onion/gpg4usb/I'd love it if it worked for Mac, but I think it's still on the developer's to do list. I'll be delighted to be wrong! :)