Integrity
This site is reviewed when updated to confirm nothing has changed in how it operates. After the first visit, pages remain accessible offline.
Verification
Each update is signed and may be verified locally. The content is intended to be identical for every reader.
Three files allow verification:
/integrity.json — SHA-256 hashes of all public assets
/integrity.json.sig — detached PGP signature
/.well-known/pgp-key.asc — public signing key
Fingerprint:A729 591B 450D 3F59 3694 98BD 8299 1F25 04AE 0263
Verify live
Verification runs in a temporary keyring and does not modify your local GPG configuration.
tmpdir="$(mktemp -d)"
export GNUPGHOME="$tmpdir"
ts=$(date +%s)
curl -fsS "https://trentpower.fr/integrity.json?ts=$ts" -o integrity.json
curl -fsS "https://trentpower.fr/integrity.json.sig?ts=$ts" -o integrity.json.sig
curl -fsS "https://trentpower.fr/.well-known/pgp-key.asc?ts=$ts" | gpg --import
gpg --verify integrity.json.sig integrity.json
rm -rf "$tmpdir" integrity.json integrity.json.sig
History
Signed snapshots are kept for reference.