Is there an online tool which allows users to verify that an armoured, detached PGP signature for a file is valid?
The closest thing I found was PGPTool.org, which is quite nice but unfortunately does not cater for detached signatures.
I'm asking because I tend to send files and the corresponding signature separately, and I leave it to the conscience of my recipient to verify that the signature is valid (i.e., if they don't care and just open the file without checking, it's on them).
So to be clear, I'm looking for a user-friendly online tool, where a user can upload:
- a public key file (.gpg),
- a file containing the signature (.asc),
- a file containing the message,
and the website says yay 👍 or nay 👎.