Verification of liteaddress.org signature

[liteuser]

Here is a guide to how to verify the signature for the liteaddress.org web page:

https://liteaddress.org/

First, download the PGP public key for "pointbiz". The link on liteaddress.org does not seem to work at the moment,
but the PGP link from bitaddress.org does, and it is the same public key as can be seen from the fingerprint.

Here is a direct link:
https://www.bitaddress.org/pointbiz_bitaddress.org.asc

Save the file, and import it with gpg:
gpg --import pointbiz_bitaddress.org.asc

Check the fingerprint of the public key:
gpg --fingerprint pointbiz

This should give the following fingerprint:
Key fingerprint = 527B 5C82 B1F6 B2DB 72A0 ECBF 8749 7B91 6397 4F5A

Verify that this is the same fingerprint as stated on liteaddress.org and bitaddress.org.

Here is an archived version:
http://archive.is/2Ot0p

Next, download the zip-archive with the web page. The current version can be downloaded here:
https://github.com/pointbiz/bitaddress. ... v2.9.8.zip

Unzip the contents:
unzip bitaddress.org-2.9.8.zip

Cd to the folder, and verify the signature with gpg:
gpg --verify bitaddress.org.html.sig bitaddress.org.html

This should give an output like this:

=====
gpg: Signature made tor 8 jan 2015 23:37:45 CET using RSA key ID 63974F5A
gpg: Good signature from "pointbiz <pointbiz@bitaddress.org>"
gpg: aka "ninja <ninja@bitaddress.org>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 527B 5C82 B1F6 B2DB 72A0 ECBF 8749 7B91 6397 4F5A
=====

The important part is: "Good signature".

If this message is written the signature for the page is verified OK. You are now ready.

As an optional step it is possible to sign the public key in order to avoid the warning message.
This is explained below:

First you need a private key of your own, which is created like this:
gpg --gen-key

Follow the instructions for creating the key. You will need entropy, which needs some time time to generate.
When your private key has been created, edit the public key for pointbiz:

gpg --edit pointbiz
Check the fingerprint:
fpr

Sign with your key:
sign

Then quit the application:
quit

Now, if you verify the signature there are no warning messages since the public key is trusted.