Sig Scout

Catch and check signed PGP blocks: scans the current page for signed messages and checks them against keys you've chosen to trust.

Deepfakes made "looks real" worthless: anyone can generate a video of your favorite creators doing anything--how can you know it was really posted by them? Sig Scout solves the problem by letting creators digitally sign their work. It won't tell you if they've posted slop, but it can let you know that the content is genuinely from the person you think it's coming from, that it isn't some generated forgery. Any web page, video or other content may provide a signature that could only have been produced by the person holding the secret key. This appears on the page within a block starting with "BEGIN PGP SIGNED MESSAGE", with some text (like the URL of the official page, what the person said in the video, anything to let you know this is from the same page) and a block of gibberish. You could manually install software, import the public keys and verify it all yourself. Sig Scout lets you: 1) point it to a resource the creator provides to automatically get their key and then 2) just click "Scan this page" to find that signature and verify it is actually valid and signed by a key you've trusted. That's it! Once you've imported a key from a trusted source, everything happens locally in your browser. No data is collected or transferred anywhere, you have full control over the set of trusted keys, all verification happens on your own system and under your own control, and the plugin is open source, available on github now.