I have written two shell scripts:
-
One fetches the Tor developers' keys. It gets a list of key ids from the Tor website, and then fetches the keys from a GPG key server.
-
The other periodically checks if the keys have changed.
Neither script is polished -- just enough for me to be able to send keys in a timely manner.
Should I send a pull request with the scripts and the keys? Or just the keys?