Page Verification
In order to allow people to verify that a post has really been created by me, I sign all blog posts and my "About" page using my public key.
Using My Script
To verify a page, you can use
this script
(signature), which you
can also find here in my blog repository.
verify.sh "$URL", where $URL is the URL on my blog you want to
verify.
WARNING: Never execute a script that you downloaded from the
Internet without checking it first. This also holds true for this one.
What The Script Does
The following are the steps that my script takes to verify a page's signature. It is written down so that you could verify a page signature even without downloading my script.
- Download the page source to "page.html"
- Extract the PGP signature from the top and save it to "page.html.sig"
- Replace the signature in "page.html" with "%%%SIGNED_PAGES_PGP_SIGNATURE%%%" (Without the ")
- Verify using
gpg --verify page.html.sig page.html