Adam Culler

Contact

Reaching me

Encrypted email first, Signal if you'd rather not set up PGP.

Encrypted email is what I would prefer, at adam@thecullerfamily.com. My PGP key and how to check it are below.

If you would rather not set up PGP, I am on Signal as abc.5977.

One thing to know about encrypted email

PGP encrypts the body of a message and anything attached to it. It does not encrypt the subject line, the addresses, or the timestamps. Anyone who can see the mail server can tell that we are corresponding, and how often, even though they cannot read what we say. Keep subject lines empty or meaningless.

PGP fingerprint

6D1BF24780DDE22FF1E2AA7DBC84093744C1E59B

Download key.asc

Randomart of the fingerprint.
ASCII
+----[PGP 160]----+
|       .oo.      |
|       ..+ .     |
|        o = .    |
|       . o =     |
|      . S E .    |
|       o B B     |
|        o.* +    |
|       . oo+     |
|      ..ooo.     |
+-----------------+

Before you trust it, compare the fingerprint above against at least one source that is not this page. A website can be replaced. A fingerprint is only worth something once you have seen it in more than one place.

  1. 01keys.openpgp.orgA verifying keyserver. It publishes an address only after confirming it.
  2. 02This pageOne signal of two, not an authority.
gpg --keyserver hkps://keys.openpgp.org --recv-keys 6D1BF24780DDE22FF1E2AA7DBC84093744C1E59B
gpg --fingerprint 6D1BF24780DDE22FF1E2AA7DBC84093744C1E59B

The hkps:// matters. Some setups default to an older keyserver protocol that this server does not accept, and the command fails with an "end of file" error if you leave it off.

Compare what your client shows you against the fingerprint above, character by character. Do not rely on a short key ID, meaning the last eight or sixteen characters; those have been possible to forge for years. You can also download the key here: key.asc.

If something does not match, do not use the key and do not send anything sensitive. Tell me through a different channel from the one that gave you the bad fingerprint, for example Signal instead of email. Most mismatches are dull, usually a key I rotated and forgot to update in one place. Some are not. I want to hear about it either way.

Check a fingerprint

Paste the fingerprint your client or another source shows you. It is compared against the one on this page, group by group, right here in your browser. Nothing is sent anywhere.