This page lists the keys in use by [Metasploit committers](https://github.com/rapid7/metasploit-framework/wiki/Committer-Rights).

| Account | E-mail | Gist | MIT |
| ---------- | ------ | ------------ | ------- |
| [@bcook-r7](https://github.com/bcook-r7) |bcook@rapid7.com | [D5E4D8D5](https://gist.github.com/bcook-r7/51ea7598ce6780d2aadd) | [0x663AF51BD5E4D8D5](http://pgp.mit.edu/pks/lookup?op=get&search=0x663AF51BD5E4D8D5) |
| [@FireFart](https://github.com/FireFart) |firefart@gmail.com | [66BC32C7](https://gist.github.com/FireFart/093da40e1130d79a737a) | [0xBCFF4FA966BC32C7](http://pgp.mit.edu/pks/lookup?op=vindex&search=0xBCFF4FA966BC32C7) |
| [@jlee-r7](https://github.com/jlee-r7) | egypt@metasploit.com | [CEA0A321](https://gist.github.com/jlee-r7/7321405) | [0x2d6094c7cea0a321](http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x2d6094c7cea0a321) |
| [@jhart-r7](https://github.com/jhart-r7) | jon_hart@rapid7.com | [AFA8E9D3](https://gist.github.com/jhart-r7/f4bb98f4cb6540462cfd) | [0x2FA9F0A3AFA8E9D3](http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x2FA9F0A3AFA8E9D3) |
| [@jvazquez-r7](https://github.com/jvazquez-r7) | juan.vazquez@metasploit.com | [B9352D83](https://gist.github.com/jvazquez-r7/7321429) | [0x38D99152B9352D83](http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x38D99152B9352D83) |
| [@jvennix-r7](https://github.com/jvennix-r7) | joev@metasploit.com | [3E85A2B0](https://gist.github.com/jvennix-r7/7572570) | [0x127b05fb3e85a2b0](http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x127b05fb3e85a2b0) |
| [@kernelsmith](https://github.com/kernelsmith) | kernelsmith@metasploit.com | [92EC0809](https://gist.github.com/kernelsmith/0e9563d2fb52f16765b5) |[0xf2c611dc92ec0809](http://pgp.mit.edu/pks/lookup?op=vindex&search=0xF2C611DC92EC0809) |
| [@limhoff-r7](https://github.com/limhoff-r7) | luke_imhoff@rapid7.com | [B33356F8](https://gist.github.com/limhoff-r7/8714106) | [0x5B1FB01FB33356F8](http://pgp.mit.edu/pks/lookup?op=vindex&search=0x5B1FB01FB33356F8) |
| [@Meatballs1](https://github.com/Meatballs1) | eat_meatballs@hotmail.co.uk | [1F2F8B38](https://gist.github.com/Meatballs1/6732257) | [0x5380EAF01F2F8B38](http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x5380EAF01F2F8B38) |
| [@OJ](https://github.com/OJ) | oj@buffered.io | [1FAA5749](https://gist.github.com/OJ/8d4533352afd1586526d) | [0x49EEE7511FAA5749](http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x49EEE7511FAA5749) |
| [@scriptjunkie1](https://github.com/scriptjunkie) | scriptjunkie@scriptjunkie.us | [591C6B5D](https://gist.github.com/scriptjunkie/7280483) | [0xE0F49052591C6B5D](http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0xE0F49052591C6B5D) |
| [@timwr](https://github.com/timwr) | timrlw@gmail.com | [ABBAABEF](https://gist.github.com/timwr/4c88fa851efabd435d4d) | [0x217FBA50ABBAABEF](http://pgp.mit.edu/pks/lookup?op=vindex&search=0x217FBA50ABBAABEF) |
| [@todb-r7](https://github.com/todb-r7) | tod_beardsley@rapid7.com | [EA19CAAC](https://gist.github.com/todb-r7/7269765) | [0xBD63D0A3EA19CAAC](https://pgp.mit.edu/pks/lookup?op=get&search=0xBD63D0A3EA19CAAC) |
| [@wchen-r7](https://github.com/wchen-r7) | wei_chen@rapid7.com | [F06F730B](https://gist.github.com/wchen-r7/0e0269d9ff0afc1ca7a5) | [0x2384DB4EF06F730B](http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x2384DB4EF06F730B) |
| [@wvu-r7](https://github.com/wvu-r7) | william_vu@rapid7.com | [C1629024](https://gist.github.com/wvu-r7/dc5d571f99688bc16c99) | [0xE761DCB4C1629024](http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0xE761DCB4C1629024)|
| [@zeroSteiner](https://github.com/zeroSteiner) | zeroSteiner@gmail.com | [A5E15412](https://gist.github.com/zeroSteiner/b32f86a76d701af42dbd) | [0xC00D6B6AA5E15412](http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0xC00D6B6AA5E15412)|

# Signing criteria

In order to get @todb-r7 to sign your key, you should:

 * tell him your Key ID over some mechanism (IRC, Skype, etc)
 * post it to https://gist.github.com under your GitHub account

If you are near by, he'll ask you to confirm your Key ID in meatspace, using unique biometric and contextual data to verify your identity. If not, he'll e-mail you, using that key and a known e-mail address, and expect your response.

This constitutes verification that your key is, in fact, yours. Please set a reasonable expiration date (18 months is recommended), key length (2048 or better), and use good sense when managing your private key availability.

# Signing HOWTO

Signing merges and commits is easy and fun. Generate a signing key, if you don't have one already, using your favorite PGP/GPG interface (I use `gpg --gen-key`). Then add this to your $HOME/.gitconfig:

````
[user]
  name = Your Name
  email = your_email@example.com
  signingkey = DEADBEEF # Must match name and email exactly!
[alias]
  c = commit -S --edit
  m = merge -S --no-ff --edit
````

Using `git c` and `git m` from now on will sign every commit with your `DEADBEEF` key.