Yep: gpg: Signature made Sat 30 Nov 2013 21:47:11 GMT using DSA key ID F7E5D682 gpg: requesting key F7E5D682 from hkp server sks.keyservers.net gpg: key

Yep: gpg: Signature made Sat 30 Nov 2013 21:47:11 GMT using DSA key ID F7E5D682 gpg: requesting key F7E5D682 from hkp server sks.keyservers.net gpg: key F7E5D682: public key "Gwern Branwen <gwern@gwern.net>" imported gpg: Total number processed: 1 gpg: imported: 1 gpg: Good signature from "Gwern Branwen <gwern@gwern.net>" gpg: aka "Gwern Branwen <gwern0@gmail.com>" gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 85F9 9FDE 8F20 898F 59BC DF32 BE90 E8E4 F7E5 D682 Although anyone can create a key with the uid "Gwern Branwen <gwern@gwern.net>" and upload it to the keyservers. There's no email verification involved.