<oembed><type>rich</type><version>1.0</version><title>Luke Dashjr wrote</title><author_name>Luke Dashjr (npub1lh…aa9nk)</author_name><author_url>https://yabu.me/npub1lh273a4wpkup00stw8dzqjvvrqrfdrv2v3v4t8pynuezlfe5vjnsnaa9nk</author_url><provider_name>njump</provider_name><provider_url>https://yabu.me</provider_url><html>Hence &#34;You should download multiple developers&#39; public keys from at least two independent sources each and ensure they match. Ideally, you should verify key fingerprints in person with the developer(s) to the best of your ability.&#34;😉 &#xA;&#xA;Catch me at a Bitcoin conference sometime - I carry around business cards with my PGP key fingerprint. &#xA;&#xA;In the past, Core devs have had key signing meetings, but I had to make a new key after the last one</html></oembed>