TL;DR: All critical content on this site is signed with my PGP key.
Import the public key below, then verify any .asc signature using gpg --verify.
RSA30722026-01-040x099671C11C2D 5D96 0BED 7BED F339 FA39 4BF6 875D 0996 71C1-----BEGIN PGP PUBLIC KEY BLOCK----- mQGNBGlasEkBDADPy5/1GB0kA76CbH+KZH8Gke5IOYdS/ecNulVy7/hfMqQLdvRo mFMhRRYr62RzFj09u3a7zrrjCOCQ13WpBOK/liKUZ9wzQVWxOAjudZ/85PYOUBl6 h1mu6RpaepQCOVHl6izbsmA33TLU4i4Wtsbtu6f3YPkNzl8ZdT3VCPuh7hR88LnQ VlrZeiqb9mm13hXHiUsgOS/h6RldtsZw8r9TgRgzNfWLw1vmFlRvLdGGuxktmRX5 oE+cKGkGDyZan/03dT0ydUw1QCVZpjKbAD4x9se7xnLyT188/3K1pBpLN5q8yg1i 65cUDorfl6MiV0vy4sLi+DWlb3ucqRbnllKFzX7NiWfc4z1XmwdwNvUYSHl89JF1 oeh0yddzpFdvDWHG/GdDdDHhDnfg3Gm75tpy91NluADGhpL6saHvIGmxd1SQRnIz frSM1kB0NqfDBsvaRD0mUvvEneOeaiQYQXHLXaa7qqnak4ZKLgHBgIaOu7xb7hCb QgSCkmzQPif7zWMAEQEAAbQ+YW1hbiBiZWhlcmEgKHRvIGJlIGxvdmVkIGlzIHRv IGJlIHNlZW4pIDxhbWFuX2JAY2guaWl0ci5hYy5pbj6JAdEEEwEIADsWIQQcLV2W C+177fM5+jlL9oddCZZxwQUCaVqwSQIbAwULCQgHAgIiAgYVCgkICwIEFgIDAQIe BwIXgAAKCRBL9oddCZZxwQ4pC/46araGv8GkC7/tWH9B3851TcRO/crNfKArcaWb RSKEvsKX51JKHvWajmrkTw/UdJWfHF8n+xTDAJyyta7YCsv7D6jQuk5zxpo5Mqfx FIO6yM2GSCfuiaJGNne/f/8xHPIS4XB5DweRlFr++0AnbAkaxZs5ywmK3oJc1elp SDEaV7M51dR2EtFpWj9UQfSx6QesY9+jPCf5DcUDqtVJhwnR7mYurom7VoON1TZc JdAqfHmBcbf/efnr4U0ybmZbaFW8xylPj3X5MbgIw2MF/tIqQkTl5q8HpovtSN04 5QI21+6X7sBA5pJaLry09Ou1CHZZE7IcHwhdNrem5GN1PdE1P0FJR6jyiwvSJiLO wRjWfC4ywRBASuUcMcP99uS3S4vLTkpUaWYmBs/v+N1JRDJnbyr7Gv8Z5ZkVjKZ2 9P5lOJXXefN45SVFDgkqHU30xsxQicUtfZhdIr5BSVLZTaTmXTrHgHGDjnzGR+k9 6GBfs5CBLNIbCOS/dJtgkMEO/O65AY0EaVqwSQEMALTONZ92FEwf63jPrXbcWknJ vMnJ98pqwBxh1BKSr42vII/urRqpmxqbc1TJnRFyz1rrrXeoFs5a6lSnZP8Bpftu YB8gTVrKg5tR++EhQQESoQSEvd2R3mpETpNgxhyEo8Ci7J76hbl2O4byVWrsFM/m jbGyDHqXkOPDE5znsWISqn9UlvOKdt/elNdymNVM3zew0g3wZq2ee7GtwVHnGF2Y 5pKeFYLxc83NBdlT067EIkrapIjM8/1aTxAmtSn2EhZLKaiIbWRHSuVGW0i9hmrw RbSXGspRGXbLl3c6A8brQOEoq7w/y/fJnpFYkN2oeoWn3mjL4qShe4lXJjGGRjbc JDX+FB/8p5PKc2NFbfwZYOnUs5OSp5DyfbQeXk4fZh7cIREpQJa36RidVpx2fsWB vTuyVIz0s72ZToieFU399j86uAINJZV6fP4vcXvbN44TKxX1mQLzRIBH8J4wqd3W tEvycIV2oAmaMh0V9VSl4NQ+aNCRRXinwwuJxeBfFwARAQABiQG2BBgBCAAgFiEE HC1dlgvte+3zOfo5S/aHXQmWccEFAmlasEkCGwwACgkQS/aHXQmWccEAuQv9GN91 6uISavCBAL/RMFCqWnZkEtSwJrcdwsXdjm8BGoBtkI8ySiAuXV0TKCJkHOcdw0aE BNBXa8YD7HKzg1WPSEFifOBip9pB3nqfiqPzJr6CMQtlc1RvPXQLuioc7Q4kmmSm Q+EbBH33gVZDlUJYR++ifJHuJhD2qtwMZ/XCXilwvObuVypMuC+TOX+aN7UpvApw mW74s2YR8zsFWgl3Yn/SeTGdMRf6Ld0m7LF9arv8hiGx9Kzb4Ts+K9gvsOTL/iG+ Vh9K2BYBPh9YMS0Km2J9s5HCj+ucp/ycgGPCPgI9xUSHUbqOq2N/p7mKoEf2Y4k8 o9vaGN6mFFfM1kJF9BngIMbzvCva21rtEGfIo5jESoXDjSmYdL6xYTqQQPPQHOxN ZXg3Oa87OoZn6Ntg06qFtsD6YTJwvuO+7KDZOLBUIz3aGsmg0Pk3Sgrj5khzdrAM FGtacJ5onof4ngEckMQSJdsPGwwSyfSpIigOCI8vOHwUAZklL+H8VmWObVFp =3c2Y -----END PGP PUBLIC KEY BLOCK-----
gpg --import aman-behera-public.asc
gpg --verify signed-message.txt
gpg --fingerprint 0x099671C1
If you want a stronger integrity story, you can publish detached signatures next to key pages and the RSS feed.
KEYID=0x099671C1 ./scripts/sign-site.sh
gpg --verify index.html.asc index.html
gpg --verify feed.xml.asc feed.xml
Note: signatures are only meaningful if the public key you imported is the one you trust.
Why sign content?
Cryptographic signatures provide proof of authenticity and integrity. If you see content claiming to be from me, you can verify it was actually written by me and hasn't been tampered with.