PGP

Public key and fingerprint for verifying signed messages and signed files from Hugo Daniel.

You can encrypt messages to me, or verify things I have signed, with this key.

Fingerprint

E49D 556A D099 3482 CA78  B6E8 C181 88F9 E2A4 C0AD

Identities (both verified):

Pick whichever you trust most.

Direct download — pgp.asc

Web Key Directory — resolves straight from this domain:

gpg --locate-external-keys mail@hugodaniel.com

Keyserver:

gpg --keyserver hkps://keys.openpgp.org \
    --recv-keys E49D556AD0993482CA78B6E8C18188F9E2A4C0AD

The feed at /atom.xml is detached-signed. Verify any snapshot you fetched:

curl -sO https://hugodaniel.com/atom.xml
curl -sO https://hugodaniel.com/atom.xml.asc
gpg --verify atom.xml.asc atom.xml

Algorithm: Ed25519 (curve25519) primary, with cv25519 encrypt and ed25519 sign/auth subkeys
Created: 2026-05-21
Subkeys live on a YubiKey 5; signing requires a physical touch
Revocation certificate is stored offline in two locations — if this key disappears from circulation, it was revoked on purpose