By sharing it over a trusted channel (like their website, a well-known social media profile, or an AFK interaction) or cryptographically signed with a trusted k

By sharing it over a trusted channel (like their website, a well-known social media profile, or an AFK interaction) or cryptographically signed with a trusted key. Certainly not by sending it in unsolicited emails or DMs.