Right, I click on the link to download the Whonix Signing Key
2. Store the key as ~/patrick.asc .
Don’t know what that means. Alter the name of the file? I can’t put a / into a file name
3. Check fingerprints/owners without importing anything.
No idea what that means. I don’t know what a fingerprint or owner is, don’t know how to check, what should they be anyway?
4. Verify the output.
What output? Verfiy how?
5. Import the key.
Does this mean? I’ve opened Kleopatra, clicked on the import button and chose the patrick file and it gives me a bit of info. But I’m already worried that I couldn’t do steps 2,3 and 4 first.
I don’t get any type of output that matches the instructions
6. Advanced users can check [Web of Trust]
I think we can all tell I’m not an advanced user so let’s ignore this.
7. Complete the Whonix ™ verification steps.
I assume I go back to the previous webpage
It then suggests I use the gpg #command line, not sure if I follow all that.
In Kleopatra Patrick is listed in ‘Other certificates’ but I don’t get " Not enough information to check signature validity "
It then says ‘you need to create your own OpenPGP key first. You could do that using ( Kleopatra → File → New Certificate )’
I haven’t got New Certificate as an option in File. I have New Key Pair. So I am totally at a stop now.