[tor-talk] Where is the tor signing key?

[Matthew Finkel]

On Thu, Dec 10, 2020 at 09:19:46AM +0000, Colin Baxter wrote:
> 
> The URL https://support.torproject.org/tbb/how-to-verify-signature/
> gives the impression that the signing key email address is
> torbrowser at torproject.org. However
> 
>  gpg2 --search-keys torbrowser at torproject.org <RET>
> 
> gives 
> 
> gpg: key "torbrowser at torproject.org" not found on keyserver.
> 
> What's the correct email address for the signing key?

torbrowser at torproject.org is the correct email address, but you may be
querying the wrong server. On the page you referenced there is a section
for this:

"""""""
Fetching the Tor Developers key

The Tor Browser team signs Tor Browser releases. Import the Tor Browser
Developers signing key (0xEF6E286DDA85EA2A4BA7DE684E2C6E8793298290):

gpg --auto-key-locate nodefault,wkd --locate-keys torbrowser at torproject.org
"""""""

The key is available on keys.openpgp.org, as well, if you need it from
another key server:

https://keys.openpgp.org/search?q=torbrowser%40torproject.org