From f93014e8db7f4e4b1fe7ab84175cd3a3e48c4001 Mon Sep 17 00:00:00 2001 From: Alexander PapaTutuWawa Date: Wed, 23 Sep 2020 16:59:23 +0200 Subject: [PATCH] Small fix + Add verify page --- content/about.html | 64 +++++++++++++++++++++++---------------------- content/verify.html | 46 ++++++++++++++++++++++++++++++++ 2 files changed, 79 insertions(+), 31 deletions(-) create mode 100644 content/verify.html diff --git a/content/about.html b/content/about.html index e8763a9..b906f7e 100644 --- a/content/about.html +++ b/content/about.html @@ -1,38 +1,40 @@ -
-
-

About "PapaTutuWawa"

+
+
+
+

About "PapaTutuWawa"

-
- Profile Picture +
+ Profile Picture +
+ +
+ Student, Anime expert, Vocaloid listener, Docker and Linux fan + and hobby SysAdmin. +
+ + + +

Contact

+
    +
  • EMail: {{ email_user }} ["a" with a weird circle] {{ email_domain }} (GPG)
    • +
+ +

About This Page

+
    +
  • Source
    • +
  • All pages are signed using my public key. Use this script (signature) to verify or see here to learn more
    • +
  • Last updated {{ build_time }}
    • +
- -
- Student, Anime expert, Vocaloid listener, Docker and Linux fan - and hobby SysAdmin. -
- - - -

Contact

-
    -
  • EMail: {{ email_user }} ["a" with a weird circle] {{ email_domain }} (GPG)
    • -
- -

About This Page

-
    -
  • Source
    • -
  • All pages are signed using my public key. Use this script (signature) to verify
    • -
  • Last updated {{ build_time }}
    • -
diff --git a/content/verify.html b/content/verify.html new file mode 100644 index 0000000..bbcfc9b --- /dev/null +++ b/content/verify.html @@ -0,0 +1,46 @@ + + + +
+
+
+

Page Verification

+ +

+ In order to allow people to verify that a post has really been + created by me, I sign all blog posts and my "About" page using + my public key. +

+ +

Using My Script

+

+ To verify a page, you can use + this script + (signature), which you + can also find here in my blog repository. + + verify.sh "$URL", where $URL is the URL on my blog you want to + verify. + +

+ WARNING: Never execute a script that you downloaded from the + Internet without checking it first. This also holds true for this one. +
+

+ +

What The Script Does

+

+ The following are the steps that my script takes to verify a page's signature. It + is written down so that you could verify a page signature even without downloading + my script. + +

    +
  • Download the page source to "page.html"
    • +
  • Extract the PGP signature from the top and save it to "page.html.sig"
    • +
  • Replace the signature in "page.html" with "%%%SIGNED_PAGES_PGP_SIGNATURE%%%" (Without the ")
    • +
  • Verify using gpg --verify page.html.sig page.html
    • +
+

+
+
+