Keys and Verification - googlers-against-tech-oligarchy.org

Member Keys

This section lists the public keys corresponding to cryptographic public-private key pairs owned by members of GATO. These keys are used to certify that certain content originates from our members.

Key: gato-member-1

Public Key Material

download key file

Description

Public Key corresponding to the private key owned by the first member of GATO. Currently used for validating any public messaging for GATO.

The scope of this key may change as our leadership grows and responsibility is shared among more people.

This key is valid until Sept 3, 2028.

Corroborating Links

You can double-check the key contents at the following locations:

Proof of Existence

This message, along with the attached signature, serves as proof that this
webpage exists as of May 12, 2026 UTC.

This message will be updated within a day or two to contain the most recent
internet archive (A.K.A. "Wayback Machine") link to this webpage.

Wayback Machine links verifying the time at which this site was available:
* May 12, 2026: https://web.archive.org/web/20260512061547/https://googlers-against-tech-oligarchy.org/public-keys/

In-Line Statement Signature

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

This message, along with the attached signature, serves as proof that this
webpage exists as of May 12, 2026 UTC.

This message will be updated within a day or two to contain the most recent
internet archive (A.K.A. "Wayback Machine") link to this webpage.

Wayback Machine links verifying the time at which this site was available:
* May 12, 2026: https://web.archive.org/web/20260512061547/https://googlers-against-tech-oligarchy.org/public-keys/
-----BEGIN PGP SIGNATURE-----
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=04P2
-----END PGP SIGNATURE-----

statement text

download detached signature from gato-member-1

in-line signature from gato-member-1 (text)

Certificate Verification

Verifying the provided signatures provides strong proof that the content you are seeing is authentic, as well as the content seen on any of the pages saved to the Wayback Machine. Below we provide several methods to verify the signatures. (More methods will be added later.)

Option 1 (Simplest) - Verify the In-Line Signature on the Web

Navigate to https://pgptool.dev/verify;
Copy the public key material for the appropriate key into the "Signer public key" field (or, download the public key to your computer and upload it using the "Choose file" button);
Copy the contents of the in-line signature into the "Clearsigned message" text box;
Click "Verify";

An authentic signature will produce a "Signature valid" message.

Option 2 - Verify the In-Line Signature on your Computer

This option is available if you have gpg or pgp on your computer. If so, follow these instructions:

Download the appropriate public key which signed the signature you want to verify;
Import the public key (if you haven't already done so) using the following command;

$ gpg --import <public_key_file>

3. Download the in-line signature file to your computer;

4. Verify the signature using the following command:

$ gpg --verify <in_line_signature_file>

If the signature is valid, the command output should include the following near the end:

"Good signature from "gato-member-1 <g.workers.listening@proton.me>" ".

Option 3 (Recommended) - Verify the Detached Signature on your Computer

This option is available if you have gpg or pgp on your computer. If so, follow these instructions:

Download the appropriate public key which signed the signature you want to verify;
Import the public key (if you haven't already done so) using the following command;

$ gpg --import <public_key_file>

3. Download the raw statement text file to your computer;

4. Download the detached signature file to your computer;

4. Verify the signature using the following command:

$ gpg --verify <detached_signature_file> <raw_statement_text_file>

If the signature is valid, the command output should include the following near the end:

"Good signature from "gato-member-1 <g.workers.listening@proton.me>" ".