You can publish the key on keyservers and get some trust on it. e.g http://pgp.mit.edu:11371/pks/lookup?search=37signals&op=index http://pgp.mit.edu:11371/pks

You can publish the key on keyservers and get some trust on it. e.g http://pgp.mit.edu:11371/pks/lookup?search=37signals&op=index http://pgp.mit.edu:11371/pks/lookup?search=37signals&op=... http://pgp.mit.edu:11371/pks/lookup?search=heroku http://pgp.mit.edu:11371/pks/lookup?search=heroku