I use Split GPG in Qubes, with subkeys. The key at https://conorz.tk/gpg is the one I use for email. The fingerprint is: CF70 A92F 24B4 BF66 C61A 2034 65EC 4C53 D564 614F *I have used this key to sign this note.* I use a separate key for signing code: ``` sec rsa4096/7A1AB3507D9B734F 2023-03-17 [SC] 5A3D0715FEDEC4AB5853D4AB7A1AB3507D9B734F uid [ unknown] titanz (titanz repo signing key) ssb rsa4096/38AE152A22340ADD 2023-03-17 [E] ssb rsa4096/EABC72179C71D4F5 2023-03-17 [S] [expires: 2025-10-28] ``` Both are available on keyservers - for example: https://keyserver.ubuntu.com/pks/lookup?search=titanz&fingerprint=on&op=index The public key I use for repo signing is titanz.pub gpg-keys.asc contains a PGP Signed copy of this information.