Using PGP keys to sign documents, helpful for needauth converters?

[Pavel Sanda]

On Mon, Jul 06, 2020 at 02:30:57PM -0400, Richard Kimberly Heck wrote:
> Could we use the private key to put some kind of signature into the
> header, along with an indication of what key is needed to verify it?

We could just store in the header ascii-armorized signature from pgp
of the .lyx file (without this section) and perhaps store fingerprint
which would help with importing the public key of person who signed it.

We should be however cautious whether we would automatize key
retrieval - I would let the user handle the key retieval business
on his own. There old keyservers are half-way broken method nowadays
and many projects use different ways of distributing keys.

Pavel