Verifying PGP Signature to be 100% positive I'm downloading what I intend to.

[porkandbeansboy]

I'm hoping someone here can give me a simple and step by step instruction guide that will help me verify the files of my qbittorrent download to make sure I'm not potentially downloading anything nefarious.

[porkandbeansboy]

Should I be posting this topic in another part of the forum that's more appropriate?

[Peter]

Ha, this always comes up. I always test it myself, it works for me and it doesn't for the user.
Not sure what to tell ya.

- get the sig from website
- import sig with gpg
- grab the installer you'd like
- grab the signature for the installer
- check gpg --verify
- it's OK, "Good signature"

that's about it.