[SD4L-user] Using .sig files

[Jonathan C. <jco...@ro...>]

Sorry if this is a really dumb newbie question, but ...

how can I verify my downloaded packages using the .sig file?

If gpg is to be used, I need your public key. Where would I get this?

If that's not the right program, could you clue me in as to how to do this?

Thanks.