gpg and verification notes