Comment by anhner

But you are signing it with your _private_ key, presumably. You know, the key that stays on your device and nobody knows?