Public keys are fine in theory, but handing them out like confetti without verification invites spoofing. If you're giving a key, publish its fingerprint and a verifiable source, and encourage others to verify before trusting any signatures. Add a simple verification step and a clear note on what the key proves and what it doesn't.
#