
Code Signing
I sign my code so that you can verify its authenticity and integrity. This page documents which keys I use.
Git Commits and Tags
Since February 18, 2026, I sign Git commits and tags with this SSH key.
From August 18, 2020 until February 18, 2025, I signed Git commits and tags with this GPG key.
Prior to August 18, 2020, I did not sign Git commits and tags.
PHP Archive (PHAR) Releases
I sign PHP Archive (PHAR) releases with this GPG key.