I use Split GPG in Qubes, with subkeys. The key at https://conorz.tk/gpg is the one I use for email. The fingerprint is: CF70 A92F 24B4 BF66 C61A 2034 65EC 4C53 D564 614F *I have used this key to sign this note.* I use a separate key for signing code: ``` pub rsa4096 2023-03-17 [SC] 5A3D 0715 FEDE C4AB 5853 D4AB 7A1A B350 7D9B 734F uid [ unknown] titanz (titanz repo signing key) sub rsa4096 2023-03-17 [E] sub rsa4096 2023-03-17 [S] [expires: 2025-10-28] ``` Both are available on keyservers - for example: https://keyserver.ubuntu.com/pks/lookup?search=titanz&fingerprint=on&op=index The public key I use for repo signing is titanz.pub gpg-keys.asc contains a PGP Signed copy of this information.